Header Security

Cross-Origin-Opener-Policy Header Check

The Cross-Origin-Opener-Policy header isolates your site from malicious browsing contexts. Check its presence to strengthen your web application security.

What this test checks

This test checks for the presence of the Cross-Origin-Opener-Policy (COOP) header. This header allows you to control whether your site can be opened in cross-origin browsing contexts, protecting against cross-origin information leak attacks.

Our recommendation

Add the Cross-Origin-Opener-Policy header with the value 'same-origin' to limit access to your site. Use 'same-origin-allow-popups' to allow legitimate popups. Test your configuration with browser developer tools.

Security tests

View all tests

Communication Security

Cross-Origin-Opener-Policy Header Check

What this test checks

Our recommendation

Read more

HttpOnly Flag on Joomla Session Cookies Check

Drupal settings.php File Access Check

PrestaShop Backup File Exposure Check

Malicious File Presence Check in Upload Folders

Shopify Client Login CAPTCHA Protection Check

Database Administration Tools Access Check

Drupal Admin Login Page Protection Check

Shopify Admin Access Restriction Check

Shopify Sensitive File Exposure Check

X-Frame-Options Header Check

Joomla configuration.php File Access Check

WordPress Debug Log Exposure Check

Shopify API Key Exposure Check

Joomla Temporary Folder (/tmp/) Access Check

Two-Factor Authentication (2FA) Check

Drupal Log File Exposure Check

PHP Error Display on Magento Check

admin-ajax.php Accessibility Check

Shopify HSTS Header Check

Drupal Version Check

Shopify Content-Security-Policy Header Check

Known CVE Vulnerability Check on Used Technologies

Shopify CSRF Protection Check

Joomla Administrator Interface Access Check

Shopify Environment Information Exposure Check

Upload Folder Indexing Check

PrestaShop Admin Login Page Protection Check

Drupal Admin Access Restriction Check

WordPress REST API Access Check

PrestaShop Log File Exposure Check

PrestaShop Session Cookie Security Check

Shopify Password Reset CAPTCHA Protection Check

Content-Security-Policy Header Check

Magento Version Check

PrestaShop Upload Folder Indexing Check

CAPTCHA Presence on Admin Page Check

Magento Backup File Exposure Check

CAPTCHA Presence on Contact Form Check

Configuration File Exposure Check

Login Attempt Limiting Check

Magento Configuration File Exposure Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify Storefront API Exposure Check

API Key Exposure Check

CAPTCHA Presence on Password Reset Form Check

Shopify Cookie Consent Banner Presence Check

Shopify phpinfo Exposure Check

SSL Certificate Check

WordPress Admin Access Check

CORS Configuration Check (Access-Control-Allow-Origin)

Directory Indexing Check

Shopify X-Content-Type-Options Header Check

WordPress Version Check

Information Leak via HTTP Headers Check

Joomla Version Check

Joomla Log File Exposure Check

Shopify File Upload Security Check

Shopify Cart Endpoint Exposure Check

Shopify Referrer-Policy Header Check

Joomla Upload Folder Indexing Check (images/)

Referrer-Policy Header Check

Magento Log File Exposure Check

Joomla Admin Access Check

PrestaShop Version Check

CNIL Mention in Privacy Policy Check

WordPress Backup File Exposure Check

PHP Error Display on Joomla Check

Shopify HTTPS Redirect Check

Drupal Backup File Exposure Check

Shopify Version Check

PHP Error Display on PrestaShop Check

Joomla REST API Access Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify XSS Protection Check

Shopify Upload Folder Security Check

HSTS Header Check (HTTP Strict Transport Security)