Data Exposure

Magento Git File Exposure Check

Exposed Git files on your Magento store can reveal your source code and secrets. Detect their presence and secure your repository.

What this test checks

This test checks whether Git files (like .git/HEAD) are publicly accessible on your Magento site. Exposure of these files allows an attacker to retrieve your source code, secrets, and development history, compromising your site integrity.

Our recommendation

Remove or protect .git files in production. Ensure the .git folder is not web‑accessible. Use deployment tools that exclude these files. Regularly check .git accessibility.

Security tests

View all tests

Form Security

Magento Git File Exposure Check

What this test checks

Our recommendation

Read more

Malicious File Presence Check in Upload Folders

API Key Exposure Check

Magento Admin Login Page Protection Check

Known CVE Vulnerability Check on Used Technologies

CNIL Mention in Privacy Policy Check

Cookie Consent Banner Presence Check

Drupal Admin Login Page Protection Check

Joomla Temporary Folder (/tmp/) Access Check

X-Content-Type-Options: nosniff Header Check

WordPress Theme Editor Access Check

Directory Indexing Check

Shopify Environment Information Exposure Check

Cross-Origin-Opener-Policy Header Check

Joomla Administrator Interface Access Check

SQL Query Exposure Check

Drupal Admin Access Restriction Check

Server Status Pages Access Check

robots.txt File Check

PrestaShop Admin Access Restriction Check

Shopify Log File Exposure Check

Shopify XSS Protection Check

Login Attempt Limiting Check

Shopify Content-Security-Policy Header Check

Two-Factor Authentication (2FA) Check

Drupal Version Check

Shopify phpinfo Exposure Check

Joomla Log File Exposure Check

Magento Session Cookie Security Check

WordPress Debug Log Exposure Check

PrestaShop Version Check

Shopify Registration CAPTCHA Protection Check

Referrer-Policy Header Check

Drupal Upload Folder Indexing Check (sites/default/files/)

xmlrpc.php Access Check

Joomla REST API Access Check

Information Leak via HTTP Headers Check

Shopify Upload Folder Security Check

Shopify SQL Injection Protection Check

Cookie Policy Page Presence Check

Shopify Storefront API Exposure Check

CAPTCHA Presence on Admin Page Check

Shopify Referrer-Policy Header Check

Plaintext Password Exposure Check

Shopify HTTPS Redirect Check

Shopify Sensitive File Exposure Check

Drupal Backup File Exposure Check

Content-Security-Policy Header Check

PHP Error Display on PrestaShop Check

CMS Vulnerability Check

Shopify File Upload Security Check

PHP Error Display on Magento Check

Magento Log File Exposure Check

Shopify Permissions-Policy Header Check

WordPress REST API Access Check

Magento env.php File Access Check

Magento Admin Access Check

Shopify Password Reset CAPTCHA Protection Check

Index File Presence in Upload Folders Check

SSL Certificate Check

Configuration File Exposure Check

Shopify Backup File Exposure Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify Client Login CAPTCHA Protection Check

HSTS Header Check (HTTP Strict Transport Security)

CAPTCHA Presence on Public Forms Check

PrestaShop Upload Folder Indexing Check

Joomla Backup File Exposure Check

CAPTCHA Presence on Password Reset Form Check

WordPress Version Check

Upload Folder Protection Check (.htaccess, index.html files)

Joomla configuration.php Exposure Check

CAPTCHA Presence on Client Login Page Check

Shopify Cookie Consent Banner Presence Check

Shopify HSTS Header Check

Privacy Policy Page Presence Check

Development File Exposure Check