CMS Security

Drupal Admin Login Page Protection Check

The Drupal admin login page is a prime target. Check that a CAPTCHA is in place to limit brute‑force attacks and strengthen site security.

What this test checks

This test checks for a CAPTCHA on the Drupal admin login page (usually /user/login). Without it, attackers can use automated scripts to guess admin credentials, leading to a complete takeover of your Drupal site.

Our recommendation

Protect the admin login page with a CAPTCHA via modules like Google reCAPTCHA or hCaptcha. Also enable login attempt limiting (Login Security), two‑factor authentication (2FA), and email notifications on failed logins. Change the admin URL if possible.

Security tests

View all tests

Server Configuration

Drupal Admin Login Page Protection Check

What this test checks

Our recommendation

Read more

Server Configuration Information Check

Shopify phpinfo Exposure Check

Shopify Password Reset CAPTCHA Protection Check

CAPTCHA Presence on Public Forms Check

Joomla Temporary Folder (/tmp/) Access Check

API Key Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Shopify Admin Access Restriction Check

SQL Query Exposure Check

PHP Error Display on Joomla Check

Shopify Storefront API Exposure Check

Shopify Cookie Consent Banner Presence Check

Cross-Origin-Resource-Policy Header Check

wp-config.php File Access Check

Drupal Admin Access Check

Shopify Registration CAPTCHA Protection Check

SSL Certificate Check

Shopify Sensitive File Exposure Check

PrestaShop Version Check

Drupal Admin Access Restriction Check

Information Leak via HTTP Headers Check

Magento Cache Folder Access Check

X-Content-Type-Options: nosniff Header Check

Database Administration Tools Access Check

PrestaShop parameters.php File Access Check

WordPress Heartbeat API Check

Shopify X-Content-Type-Options Header Check

Joomla Version Check

Clear-Site-Data Header Check

Shopify SSL/TLS Configuration Check

WordPress Backup File Exposure Check

WordPress Version Check

Shopify API Key Exposure Check

Cache Policy Check (Cache-Control, Pragma, Expires)

PHP Error Display on PrestaShop Check

Magento Session Cookie Security Check

CAPTCHA Presence on Password Reset Form Check

Magento env.php File Access Check

Shopify Permissions-Policy Header Check

CAPTCHA Presence on Client Login Page Check

WordPress Login Page Access Check (wp-login.php)

Directory Indexing Check

Shopify Referrer-Policy Header Check

PrestaShop Admin Login Page Protection Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Shopify HTTP Security Headers Check

Configuration File Exposure Check

HSTS Header Check (HTTP Strict Transport Security)

Shopify Contact Form CAPTCHA Protection Check

Database Backup File Exposure Check

Shopify Client Login CAPTCHA Protection Check

Server Status Pages Access Check

Shopify CSRF Protection Check

PrestaShop Session Cookie Security Check

Privacy Policy Page Presence Check

WordPress REST API Access Check

Content-Security-Policy Header Check

Referrer-Policy Header Check

Magento Admin Access Check

Shopify SQL Injection Protection Check

Magento Backup File Exposure Check

Joomla Upload Folder Indexing Check (images/)

Magento Configuration File Exposure Check

Shopify File Upload Security Check

PHP Error Display on Drupal Check

Shopify Cart Endpoint Exposure Check

WordPress Debug Log Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Shopify Password Protection Check

Access to wp-cron.php Check

Permissions-Policy Header Check

Joomla configuration.php Exposure Check

X-Frame-Options Header Check

Joomla configuration.php File Access Check

Shopify Content-Security-Policy Header Check

Shopify Upload Folder Security Check