Header Security

Permissions-Policy Header Check

Learn how to use the Permissions-Policy header to limit access to browser features (camera, microphone, geolocation) and protect user privacy.

What this test checks

This test checks for the presence of the Permissions-Policy header (formerly Feature-Policy). It allows you to control which browser features (camera, microphone, geolocation, etc.) can be used by your site. Absence or an overly permissive policy can expose your users to privacy risks or abuse.

Our recommendation

Add the Permissions-Policy header with a restrictive policy. Example: 'geolocation=(), microphone=(), camera=()' to block these features. To allow certain features on a subdomain, use 'geolocation=(self)'. Test your policy with developer tools or online services.

Security tests

View all tests

CMS Security

Permissions-Policy Header Check

What this test checks

Our recommendation

Read more

Joomla Cron Access Check

PrestaShop Version Check

robots.txt File Check

Shopify Contact Form CAPTCHA Protection Check

Shopify Client Login CAPTCHA Protection Check

WordPress Debug Log Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

wp-config.php File Access Check

Two-Factor Authentication (2FA) Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Sensitive File Exposure Check

Magento Backup File Exposure Check

Joomla Admin Login Page Protection Check

Magento Admin Access Restriction Check

Magento Version Check

WordPress REST API Access Check

WordPress Backup File Exposure Check

xmlrpc.php Access Check

Shopify Admin Access Restriction Check

Shopify X-Content-Type-Options Header Check

PHP Error Display on Joomla Check

PHP Error Display in Production Check

Cookie Security Check

Magento Git File Exposure Check

PrestaShop Admin Access Check

Upload Folder Protection Check (.htaccess, index.html files)

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify Referrer-Policy Header Check

Joomla Administrator Interface Access Check

Index File Presence in Upload Folders Check

Cookie Policy Page Presence Check

Joomla Upload Folder Indexing Check (images/)

CAPTCHA Presence on Contact Form Check

PHP Error Display on PrestaShop Check

Privacy Policy Page Presence Check

CAPTCHA Presence on Admin Page Check

Joomla Admin Access Check

PrestaShop Session Cookie Security Check

Content-Security-Policy Header Check

PrestaShop Admin Access Restriction Check

Configuration File Exposure Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify Backup File Exposure Check

CAPTCHA Presence on Password Reset Form Check

Drupal Version Check

Shopify Log File Exposure Check

Shopify SQL Injection Protection Check

WordPress Login Page Access Check (wp-login.php)

Access to wp-cron.php Check

WordPress Admin Access Check

Shopify Content-Security-Policy Header Check

PrestaShop Upload Folder Indexing Check

Database Backup File Exposure Check

API Key Exposure Check

Malicious File Presence Check in Upload Folders

CAPTCHA Presence on Registration Page Check

Joomla Backup File Exposure Check

Cross-Origin-Opener-Policy Header Check

Drupal Admin Access Restriction Check

Drupal Admin Access Check

Magento Session Cookie Security Check

Information Leak via HTTP Headers Check

Shopify Cart Endpoint Exposure Check

Shopify Password Protection Check

Shopify X-Frame-Options Header Check

Shopify HSTS Header Check

Shopify Admin CAPTCHA Protection Check

Email Address Exposure Check

Shopify SSL/TLS Configuration Check

Cross-Origin-Resource-Policy Header Check

Shopify REST API Exposure Check

Joomla configuration.php Exposure Check

Shopify Registration CAPTCHA Protection Check

Magento Admin Access Check

Drupal Backup File Exposure Check

Plaintext Password Exposure Check