CMS Security

Shopify Admin Access Restriction Check

Shopify admin access must be restricted to prevent intrusions. Learn how to secure this area with strong authentication.

What this test checks

This test checks whether access to Shopify administration is restricted or protected. Shopify offers mechanisms like two‑factor authentication (2FA) and user account management. Weak protection or lack of restrictions exposes your store to unauthorised access, which can lead to malicious modifications, data theft, or fraud.

Our recommendation

Protect Shopify admin access with strong authentication (2FA) and complex passwords. Use account management to limit user permissions. Enable login notifications to detect any suspicious attempts.

Security tests

View all tests

CMS Security

Shopify Admin Access Restriction Check

What this test checks

Our recommendation

Read more

WordPress Login Page Access Check (wp-login.php)

Plaintext Password Exposure Check

PrestaShop Upload Folder Indexing Check

Magento Log File Exposure Check

Content-Security-Policy Header Check

PHP Error Display on Joomla Check

Database Administration Tools Access Check

Shopify File Upload Security Check

Shopify phpinfo Exposure Check

Joomla Version Check

Upload Folder Protection Check (.htaccess, index.html files)

Joomla Backup File Exposure Check

Joomla configuration.php Exposure Check

Joomla Admin Access Check

Access to wp-cron.php Check

PHP Error Display on Drupal Check

Magento Admin Access Check

WordPress Version Check

Shopify Error Display Check

WordPress Backup File Exposure Check

Configuration File Exposure Check

robots.txt File Check

Joomla configuration.php File Access Check

Cross-Origin-Embedder-Policy Header Check

Magento env.php File Access Check

Shopify Log File Exposure Check

Development File Exposure Check

Index File Presence in Upload Folders Check

Shopify Permissions-Policy Header Check

Shopify Storefront API Exposure Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Admin CAPTCHA Protection Check

X-Frame-Options Header Check

Shopify Registration CAPTCHA Protection Check

Magento Session Cookie Security Check

WordPress Heartbeat API Check

Drupal Log File Exposure Check

CAPTCHA Presence on Registration Page Check

PHP Error Display in Production Check

Shopify Environment Information Exposure Check

PrestaShop parameters.php File Access Check

Drupal Backup File Exposure Check

Database Backup File Exposure Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify Version Check

CAPTCHA Presence on Contact Form Check

Server Status Pages Access Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Magento Git File Exposure Check

PrestaShop Session Cookie Security Check

Cookie Consent Banner Presence Check

Magento Version Check

Directory Indexing Check

SQL Query Exposure Check

PrestaShop Version Check

Joomla Log File Exposure Check

Shopify HTTPS Redirect Check

Shopify X-Content-Type-Options Header Check

Joomla Admin Login Page Protection Check

Magento Cache Folder Access Check

Shopify X-Frame-Options Header Check

WordPress Theme Editor Access Check

Shopify CSRF Protection Check

CAPTCHA Presence on Public Forms Check

Email Address Exposure Check

Shopify Password Protection Check

Shopify Backup File Exposure Check

PrestaShop Backup File Exposure Check

Shopify SQL Injection Protection Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Cookie Security Check

Shopify XSS Protection Check

Joomla Temporary Folder (/tmp/) Access Check

Magento Admin Login Page Protection Check

Joomla REST API Access Check

xmlrpc.php Access Check