CMS Security

Magento Admin Login Page Protection Check

The Magento admin login page is a prime target. Check that a CAPTCHA is in place to limit brute‑force attacks.

What this test checks

This test checks for a CAPTCHA on the Magento admin login page. Without it, attackers can use automated scripts to guess admin credentials.

Our recommendation

Protect the admin login page with a CAPTCHA. Enable two‑factor authentication (2FA) and login attempt limiting.

Security tests

View all tests

Sensitive Files

Magento Admin Login Page Protection Check

What this test checks

Our recommendation

Read more

Shopify Log File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

WordPress Theme Editor Access Check

PHP Error Display in Production Check

Drupal Admin Access Check

Installation Log File Exposure Check

CAPTCHA Presence on Admin Page Check

Shopify HTTPS Redirect Check

Development File Exposure Check

Authentication File Exposure Check (.htpasswd, .user.ini)

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

CMS Vulnerability Check

Shopify Content-Security-Policy Header Check

CAPTCHA Presence on Contact Form Check

Configuration File Exposure Check

SQL Query Exposure Check

Joomla Temporary Folder (/tmp/) Access Check

robots.txt File Check

X-Content-Type-Options: nosniff Header Check

Shopify phpinfo Exposure Check

Shopify Registration CAPTCHA Protection Check

Cookie Consent Banner Presence Check

Shopify X-Content-Type-Options Header Check

Shopify SQL Injection Protection Check

Joomla Backup File Exposure Check

Email Address Exposure Check

Shopify API Key Exposure Check

Database Backup File Exposure Check

Shopify Environment Information Exposure Check

Drupal Log File Exposure Check

xmlrpc.php Access Check

Shopify Permissions-Policy Header Check

Joomla configuration.php Exposure Check

Drupal Admin Access Restriction Check

Drupal Backup File Exposure Check

Permissions-Policy Header Check

PrestaShop Session Cookie Security Check

Shopify HTTP Security Headers Check

API Key Exposure Check

Magento env.php File Access Check

wp-config.php File Access Check

PrestaShop Log File Exposure Check

Content-Security-Policy Header Check

SSL Certificate Check

PHP Error Display on Drupal Check

Shopify Error Display Check

PrestaShop Admin Login Page Protection Check

Shopify Storefront API Exposure Check

Magento Admin Access Check

Cross-Origin-Embedder-Policy Header Check

Shopify XSS Protection Check

Joomla Admin Access Check

PrestaShop Admin Access Check

Drupal Admin Login Page Protection Check

Shopify HSTS Header Check

PrestaShop Admin Access Restriction Check

Magento Session Cookie Security Check

PrestaShop parameters.php File Access Check

Shopify Backup File Exposure Check

Directory Indexing Check

Cookie Policy Page Presence Check

Drupal Temporary Folder (tmp/) Access Check

Shopify Client Login CAPTCHA Protection Check

CAPTCHA Presence on Client Login Page Check

Cross-Origin-Resource-Policy Header Check

Shopify Password Protection Check

Drupal Version Check

Index File Presence in Upload Folders Check

Joomla Log File Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Shopify Cart Endpoint Exposure Check

WordPress REST API Access Check

Shopify File Upload Security Check

Magento Cache Folder Access Check

Shopify Contact Form CAPTCHA Protection Check

Cache Policy Check (Cache-Control, Pragma, Expires)