Data Exposure

Shopify API Key Exposure Check

Shopify API keys exposed in HTML code can compromise your store. Detect their presence and learn how to secure them.

What this test checks

This test checks whether Shopify API keys (like SHOPIFY_API_KEY, SHOPIFY_ACCESS_TOKEN) are publicly exposed in your store's HTML code. API keys allow access to third‑party services and sensitive data. Their exposure can lead to abuse, data theft, or fraud.

Our recommendation

Ensure no Shopify API key is exposed in your site's source code. Use environment variables to store this information and avoid including them in JavaScript or HTML files. Regularly review configuration files and logs for potential leaks.

Security tests

View all tests

Sensitive Files

Shopify API Key Exposure Check

What this test checks

Our recommendation

Read more

Installation Log File Exposure Check

Content-Security-Policy Header Check

Magento Git File Exposure Check

Shopify CSRF Protection Check

WordPress Theme Editor Access Check

Magento env.php File Access Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Drupal Log File Exposure Check

HttpOnly Flag on Joomla Session Cookies Check

Shopify HSTS Header Check

Shopify HTTPS Redirect Check

Drupal Version Check

Malicious File Presence Check in Upload Folders

Joomla REST API Access Check

PrestaShop parameters.php File Access Check

Shopify Version Check

Shopify REST API Exposure Check

Two-Factor Authentication (2FA) Check

Cookie Policy Page Presence Check

Upload Folder Protection Check (.htaccess, index.html files)

Database Backup File Exposure Check

WordPress Heartbeat API Check

Joomla Admin Login Page Protection Check

Clear-Site-Data Header Check

PrestaShop Upload Folder Indexing Check

Shopify Upload Folder Security Check

Magento Admin Access Restriction Check

Shopify Password Reset CAPTCHA Protection Check

Shopify HTTP Security Headers Check

HSTS Header Check (HTTP Strict Transport Security)

robots.txt File Check

Shopify Admin CAPTCHA Protection Check

Shopify Terms and Conditions (T&C) Presence Check

Joomla Backup File Exposure Check

Configuration File Exposure Check

Shopify Permissions-Policy Header Check

CAPTCHA Presence on Registration Page Check

Shopify Contact Form CAPTCHA Protection Check

PrestaShop Log File Exposure Check

Access to wp-cron.php Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify Password Protection Check

PrestaShop Session Cookie Security Check

WordPress Backup File Exposure Check

Shopify Storefront API Exposure Check

admin-ajax.php Accessibility Check

Joomla Upload Folder Indexing Check (images/)

Joomla Log File Exposure Check

CORS Configuration Check (Access-Control-Allow-Origin)

CNIL Mention in Privacy Policy Check

CAPTCHA Presence on Public Forms Check

Drupal Admin Access Check

Known CVE Vulnerability Check on Used Technologies

Index File Presence in Upload Folders Check

WordPress Admin Access Check

Server Configuration Information Check

PHP Error Display on Drupal Check

xmlrpc.php Access Check

Cross-Origin-Resource-Policy Header Check

Joomla Temporary Folder (/tmp/) Access Check

Magento Session Cookie Security Check

PHP Error Display on PrestaShop Check

PHP Error Display in Production Check

wp-config.php File Access Check

Joomla Admin Access Check

Drupal Backup File Exposure Check

Login Attempt Limiting Check

API Key Exposure Check

CAPTCHA Presence on Client Login Page Check

CAPTCHA Presence on Contact Form Check

Magento Backup File Exposure Check

Shopify Backup File Exposure Check

CMS Vulnerability Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Joomla Version Check

Magento Log File Exposure Check