CMS Security

Joomla Admin Login Page Protection Check

The Joomla admin login page is a prime target for brute‑force attacks. Check that a CAPTCHA is in place to limit automated attempts and strengthen security.

What this test checks

This test checks for a CAPTCHA on the Joomla admin login page (administrator/index.php). Without it, attackers can use automated scripts to guess administrator account credentials, leading to site takeover if weak passwords are used.

Our recommendation

Protect the admin login page with a CAPTCHA via extensions like Google reCAPTCHA or Joomla security extensions (e.g., Akeeba Admin Tools). Also enable login attempt limiting, two‑factor authentication (2FA), and email notifications on failed logins. Change the admin access URL if possible.

Security tests

View all tests

Sensitive Files

Joomla Admin Login Page Protection Check

What this test checks

Our recommendation

Read more

Magento Backup File Exposure Check

Magento Admin Login Page Protection Check

Shopify Storefront API Exposure Check

Malicious File Presence Check in Upload Folders

Shopify SQL Injection Protection Check

PrestaShop Log File Exposure Check

Cookie Policy Page Presence Check

Clear-Site-Data Header Check

PrestaShop Session Cookie Security Check

.htaccess File Presence and Security Check

Cross-Origin-Opener-Policy Header Check

PrestaShop parameters.php File Access Check

Database Administration Tools Access Check

Drupal Version Check

PHP Error Display on PrestaShop Check

Shopify HTTPS Redirect Check

Magento Admin Access Restriction Check

Shopify Password Reset CAPTCHA Protection Check

CMS Vulnerability Check

Shopify Permissions-Policy Header Check

Magento env.php File Access Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

wp-config.php File Access Check

Upload Folder Protection Check (.htaccess, index.html files)

Shopify HSTS Header Check

Shopify Cart Endpoint Exposure Check

Magento Log File Exposure Check

Shopify Content-Security-Policy Header Check

Installation Log File Exposure Check

Joomla Version Check

Directory Indexing Check

WordPress Version Check

Development File Exposure Check

Drupal Admin Access Restriction Check

Joomla configuration.php File Access Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Magento Git File Exposure Check

Shopify Admin Access Restriction Check

Plaintext Password Exposure Check

Shopify Registration CAPTCHA Protection Check

Shopify Cookie Consent Banner Presence Check

WordPress Backup File Exposure Check

Login Attempt Limiting Check

CAPTCHA Presence on Registration Page Check

Known CVE Vulnerability Check on Used Technologies

Joomla Temporary Folder (/tmp/) Access Check

HttpOnly Flag on Joomla Session Cookies Check

Magento Session Cookie Security Check

PHP Error Display on Magento Check

Shopify REST API Exposure Check

Cookie Security Check

Shopify Backup File Exposure Check

Joomla Admin Access Check

WordPress Login Page Access Check (wp-login.php)

CNIL Mention in Privacy Policy Check

WordPress REST API Access Check

Joomla REST API Access Check

xmlrpc.php Access Check

WordPress Admin Access Check

Index File Presence in Upload Folders Check

HSTS Header Check (HTTP Strict Transport Security)

Magento Version Check

X-Frame-Options Header Check

CAPTCHA Presence on Contact Form Check

PHP Error Display in Production Check

admin-ajax.php Accessibility Check

Magento Admin Access Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Joomla Administrator Interface Access Check

Shopify HTTP Security Headers Check

SSL Certificate Check

Shopify Password Protection Check

Upload Folder Indexing Check

Shopify File Upload Security Check

Drupal Admin Login Page Protection Check

PHP Error Display on Joomla Check