Sensitive Files

Magento Backup File Exposure Check

Magento backup files can expose your entire store. Detect their presence and learn how to secure them.

What this test checks

This test checks whether Magento backup files (backup.sql, backup.zip, etc.) are publicly accessible. Their exposure allows an attacker to steal all your customer data and compromise your business.

Our recommendation

Place all backup files outside the public directory. Delete obsolete backups. Use secure external backup services.

Security tests

View all tests

Sensitive Files

Magento Backup File Exposure Check

What this test checks

Our recommendation

Read more

PrestaShop parameters.php File Access Check

Shopify File Upload Security Check

Configuration File Exposure Check

WordPress Debug Log Exposure Check

Cross-Origin-Resource-Policy Header Check

Shopify Sensitive File Exposure Check

Shopify Storefront API Exposure Check

CAPTCHA Presence on Password Reset Form Check

PrestaShop Admin Access Check

Content-Security-Policy Header Check

Shopify REST API Exposure Check

Shopify Error Display Check

Shopify Content-Security-Policy Header Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

PrestaShop Backup File Exposure Check

Clear-Site-Data Header Check

.htaccess File Presence and Security Check

Shopify Environment Information Exposure Check

Email Address Exposure Check

Malicious File Presence Check in Upload Folders

Shopify Cart Endpoint Exposure Check

Cookie Policy Page Presence Check

Drupal Version Check

Referrer-Policy Header Check

Server Status Pages Access Check

SSL Certificate Check

Drupal Admin Login Page Protection Check

PrestaShop Log File Exposure Check

PrestaShop Upload Folder Indexing Check

Drupal settings.php File Access Check

Plaintext Password Exposure Check

Magento Admin Access Check

PHP Error Display on Joomla Check

Joomla Log File Exposure Check

Shopify HTTPS Redirect Check

Shopify Password Reset CAPTCHA Protection Check

Magento Cache Folder Access Check

Shopify Client Login CAPTCHA Protection Check

Joomla Backup File Exposure Check

Shopify Registration CAPTCHA Protection Check

CAPTCHA Presence on Client Login Page Check

Installation Log File Exposure Check

Joomla Temporary Folder (/tmp/) Access Check

WordPress REST API Access Check

Shopify CSRF Protection Check

PHP Error Display in Production Check

Shopify Referrer-Policy Header Check

wp-config.php File Access Check

PHP Error Display on Magento Check

WordPress Login Page Access Check (wp-login.php)

Drupal Log File Exposure Check

Drupal Temporary Folder (tmp/) Access Check

Access to wp-cron.php Check

CAPTCHA Presence on Contact Form Check

PHP Error Display on WordPress Check

Shopify SQL Injection Protection Check

Joomla Admin Access Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Index File Presence in Upload Folders Check

Shopify Upload Folder Security Check

Cross-Origin-Opener-Policy Header Check

PrestaShop Admin Access Restriction Check

Shopify SSL/TLS Configuration Check

HttpOnly Flag on Joomla Session Cookies Check

Drupal Admin Access Check

xmlrpc.php Access Check

Privacy Policy Page Presence Check

Shopify HTTP Security Headers Check

Joomla Administrator Interface Access Check

Magento Configuration File Exposure Check

WordPress Heartbeat API Check

Upload Folder Protection Check (.htaccess, index.html files)

robots.txt File Check

CORS Configuration Check (Access-Control-Allow-Origin)

WordPress Admin Access Check

CAPTCHA Presence on Public Forms Check