Data Security
Search for sensitive files exposed on search engines
This test identifies sensitive files (Excel, PDF, ZIP, etc.) indexed by Google, Bing and other search engines. Learn how to protect your exposed data.
What this test checks
This test queries search engines (via Serper API) to identify sensitive files that are publicly accessible on the Internet and indexed by Google, Bing and other search engines. It specifically searches for Excel files (.xlsx, .xls) containing sensitive data (emails, contacts, client information), PDF, CSV, DOCX, PPTX, ZIP, TAR, GZ, 7Z, RAR files, as well as database files (.sql, .backup, .dump). All these files are analyzed to detect the presence of email addresses or personal data. An attacker can exploit this data to launch targeted phishing campaigns, access internal systems, compromise your company's reputation or violate regulations (GDPR, etc.).
Our recommendation
If files have been found, identify the affected files by checking the list of URLs in the "Details" column of the report. Delete or protect these files by moving them outside the public directory of the site (/public, /www, /htdocs) or by deleting obsolete files. Configure the server to block access using a .htaccess file (Apache) or location rules (Nginx) to deny direct access to sensitive files. Ensure that backup files are not stored in public folders. If files are deleted, request removal from indexing via Google Search Console. Finally, strengthen the security of your files by protecting them with authentication or an access key. For a complete fix, contact us for a custom quote.
Security tests
Read more
Server Configuration