Sensitive Files
Magento Log File Exposure Check
Magento log files can reveal sensitive store information. Check that they are not publicly accessible.
What this test checks
This test checks whether Magento log files (in var/log/) are publicly accessible. Their exposure can facilitate targeted attacks or information theft.
Our recommendation
Place logs outside the public directory by configuring the path in env.php. Use restrictive permissions.
Security tests
Read more
Sensitive Files