CMS Security
PrestaShop Admin Login Page Protection Check
The PrestaShop admin login page is a prime target for brute‑force attacks. Check that a CAPTCHA is in place to limit automated attempts and strengthen store security.
What this test checks
This test checks for a CAPTCHA on the PrestaShop admin login page (often /admin). Without it, attackers can use automated scripts to guess admin account credentials, leading to store takeover and customer data theft.
Our recommendation
Protect the admin login page with a CAPTCHA via PrestaShop security modules (e.g., Google reCAPTCHA, hCaptcha). Also enable login attempt limiting, two‑factor authentication (2FA), and email notifications on failed logins. Change the default admin URL if possible.
Security tests