Form Security

CAPTCHA Presence on Contact Form Check

Contact forms are the primary target for automated spam. Check that a CAPTCHA is in place to protect your inbox and your users from unwanted messages.

What this test checks

This test checks whether your contact form is protected by a CAPTCHA. Without it, your form can be flooded with automated messages (spam, phishing, ads), polluting your inbox, harming your reputation, and even enabling form injection attacks.

Our recommendation

Add a CAPTCHA to your contact form. Use a service like reCAPTCHA v2 (checkbox) or hCaptcha for effective protection. If you receive few messages, a lightweight solution like Turnstile may suffice. Remember to configure CAPTCHA on all pages that contain a contact form.

Security tests

View all tests

Sensitive Files

CAPTCHA Presence on Contact Form Check

What this test checks

Our recommendation

Read more

Magento Log File Exposure Check

Shopify Sensitive File Exposure Check

WordPress Theme Editor Access Check

Shopify Cart Endpoint Exposure Check

Shopify Password Protection Check

WordPress Version Check

Joomla Admin Login Page Protection Check

robots.txt File Check

Shopify Error Display Check

PrestaShop Admin Access Restriction Check

Information Leak via HTTP Headers Check

Shopify SQL Injection Protection Check

Configuration File Exposure Check

Directory Indexing Check

Shopify HSTS Header Check

xmlrpc.php Access Check

Server Configuration Information Check

Permissions-Policy Header Check

Shopify Admin CAPTCHA Protection Check

Magento Session Cookie Security Check

CAPTCHA Presence on Admin Page Check

Drupal Admin Login Page Protection Check

WordPress Login Page Access Check (wp-login.php)

PrestaShop Admin Access Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Cookie Security Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Referrer-Policy Header Check

Plaintext Password Exposure Check

X-Content-Type-Options: nosniff Header Check

Joomla Cron Access Check

Shopify Backup File Exposure Check

Joomla configuration.php File Access Check

PHP Error Display in Production Check

Shopify Upload Folder Security Check

Shopify Client Login CAPTCHA Protection Check

PrestaShop Backup File Exposure Check

Shopify CSRF Protection Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify Log File Exposure Check

WordPress Admin Access Check

Clear-Site-Data Header Check

Shopify X-Frame-Options Header Check

PrestaShop parameters.php File Access Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify Storefront API Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

CAPTCHA Presence on Password Reset Form Check

Known CVE Vulnerability Check on Used Technologies

PrestaShop Admin Login Page Protection Check

Joomla Log File Exposure Check

Shopify Contact Form CAPTCHA Protection Check

Cross-Origin-Embedder-Policy Header Check

API Key Exposure Check

SSL Certificate Check

HttpOnly Flag on Joomla Session Cookies Check

Drupal Admin Access Check

Shopify Admin Access Restriction Check

Shopify Cookie Consent Banner Presence Check

Shopify Password Reset CAPTCHA Protection Check

Joomla Administrator Interface Access Check

Joomla Backup File Exposure Check

Joomla Upload Folder Indexing Check (images/)

PrestaShop Upload Folder Indexing Check

PrestaShop Version Check

PHP Error Display on Joomla Check

Access to wp-cron.php Check

SQL Query Exposure Check

Login Attempt Limiting Check

Privacy Policy Page Presence Check

Magento Configuration File Exposure Check

Joomla Admin Access Check

Cross-Origin-Resource-Policy Header Check

HSTS Header Check (HTTP Strict Transport Security)

Joomla REST API Access Check

Shopify Version Check