Header Security

Cross-Origin-Embedder-Policy Header Check

The Cross-Origin-Embedder-Policy header controls which resources can be embedded in your site. Learn how to configure it to enhance security.

What this test checks

This test checks for the presence of the Cross-Origin-Embedder-Policy (COEP) header. This header allows you to control which cross-origin resources can be embedded in your site, protecting against cross-origin information leak attacks and content injections.

Our recommendation

Add the Cross-Origin-Embedder-Policy header with the value 'require-corp' to require that all cross-origin resources use the Cross-Origin-Resource-Policy policy. Test your configuration to avoid blocking legitimate features.

Security tests

View all tests

Header Security

Cross-Origin-Embedder-Policy Header Check

What this test checks

Our recommendation

Read more

Clear-Site-Data Header Check

Email Address Exposure Check

Magento Version Check

Two-Factor Authentication (2FA) Check

Drupal Admin Access Restriction Check

Shopify Cart Endpoint Exposure Check

Content-Security-Policy Header Check

Configuration File Exposure Check

Access to wp-cron.php Check

Upload Folder Protection Check (.htaccess, index.html files)

Installation Log File Exposure Check

Server Configuration Information Check

Drupal Version Check

Shopify Error Display Check

WordPress Login Page Access Check (wp-login.php)

PrestaShop Admin Login Page Protection Check

Joomla configuration.php File Access Check

HttpOnly Flag on Joomla Session Cookies Check

Shopify Admin CAPTCHA Protection Check

Cookie Consent Banner Presence Check

Joomla Version Check

Shopify Sensitive File Exposure Check

Shopify SQL Injection Protection Check

Shopify Admin Access Restriction Check

Shopify phpinfo Exposure Check

Shopify X-Content-Type-Options Header Check

Shopify REST API Exposure Check

Joomla Cron Access Check

PrestaShop Version Check

PHP Error Display on Joomla Check

wp-config.php File Access Check

Shopify HSTS Header Check

PHP Error Display on PrestaShop Check

Shopify Backup File Exposure Check

Shopify Version Check

Joomla Log File Exposure Check

WordPress Admin Access Check

Shopify Log File Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify API Key Exposure Check

Plaintext Password Exposure Check

Development File Exposure Check

Server Status Pages Access Check

PHP Error Display on WordPress Check

Drupal settings.php File Access Check

X-Frame-Options Header Check

Shopify Referrer-Policy Header Check

WordPress Version Check

WordPress Theme Editor Access Check

Login Attempt Limiting Check

Privacy Policy Page Presence Check

Drupal Backup File Exposure Check

Malicious File Presence Check in Upload Folders

Cross-Origin-Opener-Policy Header Check

Magento Admin Login Page Protection Check

Directory Indexing Check

PrestaShop Log File Exposure Check

CAPTCHA Presence on Public Forms Check

Shopify Client Login CAPTCHA Protection Check

Shopify Permissions-Policy Header Check

PrestaShop Upload Folder Indexing Check

admin-ajax.php Accessibility Check

Shopify Environment Information Exposure Check

Shopify CSRF Protection Check

CAPTCHA Presence on Admin Page Check

Cookie Security Check

PrestaShop Admin Access Check

Joomla Backup File Exposure Check

Joomla Administrator Interface Access Check

Magento Git File Exposure Check

Joomla Admin Access Check

Magento Session Cookie Security Check

Magento Admin Access Restriction Check

Joomla Temporary Folder (/tmp/) Access Check

PHP Error Display on Drupal Check