Form Security
CAPTCHA Presence on Client Login Page Check
Login pages are prime targets for brute‑force attacks. Check that a CAPTCHA protects your client login forms and enhances user account security.
What this test checks
This test checks for the presence of a CAPTCHA on the client login form (front‑office). Without this protection, your customers' accounts are exposed to brute‑force attacks, where scripts try thousands of combinations to take over accounts. This can lead to data theft, fraudulent purchases, and loss of trust.
Our recommendation
Add a CAPTCHA to your client login form. Combine it with other measures like login attempt limiting, notifications of new‑device logins, and remote logout capability. For e‑commerce sites, this is an essential protection against fraud.
Security tests
Read more
Form Security