Sensitive Files
Magento Cache Folder Access Check
The Magento cache folder may contain sensitive data. Verify that it is not publicly accessible to avoid information leaks.
What this test checks
This test checks whether the Magento cache folder (var/cache/) is publicly accessible. This folder contains cache files that may reveal information about your store structure, session data, or code fragments. Its exposure can facilitate attacks or information theft.
Our recommendation
Place the var/cache/ folder outside the public directory by configuring the path in env.php. If not possible, protect it with a .htaccess file. Regularly check access to the folder.
Security tests
Read more
CMS Security