CMS Security
PrestaShop Admin Access Check
Access to PrestaShop administration (/admin) must be restricted to prevent brute‑force attacks. Learn how to secure this critical area.
What this test checks
This test checks whether access to the PrestaShop administration interface (usually /admin or a custom path) is restricted. Public access exposes your store to brute‑force attacks, where automated scripts try to guess administrator credentials. Protecting this area is essential to avoid store takeover and customer data leaks.
Our recommendation
Protect PrestaShop admin access with strong authentication (complex password) and limit login attempts via security modules. Use a CAPTCHA on the login page, enable two‑factor authentication (2FA) with dedicated modules. Change the default admin URL to reduce automated attacks. Block suspicious IPs via .htaccess or a firewall.
Security tests
Read more
Server Configuration