Server Configuration
Directory Indexing Check
Understand the risks of enabled directory indexing, how it exposes folder contents, and the solutions to disable this feature on your server.
What this test checks
This test checks whether directory indexing is enabled on your server. When enabled, visitors can see the full list of files in a folder (e.g., /uploads/) and directly access sensitive files (backups, documents, scripts). This constitutes a critical information leak.
Our recommendation
Disable directory indexing in your server configuration. Apache: 'Options -Indexes' in .htaccess. Nginx: 'autoindex off;' in the site configuration. If you need to allow access to certain files, use an index.html file or specific permissions.
Security tests
Read more
CMS Security