Form Security

Shopify Admin CAPTCHA Protection Check

Shopify admin must be protected by a CAPTCHA to limit brute‑force attacks. Check its presence and enhance store security.

What this test checks

This test checks whether the Shopify admin login page is protected by a CAPTCHA. Shopify includes security mechanisms, but adding a CAPTCHA reinforces protection against brute‑force and automated login attempts. Lack of CAPTCHA can expose admin accounts to compromise risks.

Our recommendation

Protect Shopify admin access with a CAPTCHA (via a third‑party app if needed). Enable two‑factor authentication (2FA) for enhanced security. Use complex passwords and limit login attempts.

Security tests

View all tests

Data Exposure

Shopify Admin CAPTCHA Protection Check

What this test checks

Our recommendation

Read more

Shopify Environment Information Exposure Check

Shopify Registration CAPTCHA Protection Check

Shopify Sensitive File Exposure Check

Magento Session Cookie Security Check

Drupal Temporary Folder (tmp/) Access Check

Magento Configuration File Exposure Check

admin-ajax.php Accessibility Check

Malicious File Presence Check in Upload Folders

Drupal Admin Access Restriction Check

PrestaShop Admin Access Restriction Check

Shopify Storefront API Exposure Check

Shopify Log File Exposure Check

PrestaShop Upload Folder Indexing Check

CAPTCHA Presence on Contact Form Check

Shopify Error Display Check

Server Configuration Information Check

Shopify Permissions-Policy Header Check

PrestaShop Session Cookie Security Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Configuration File Exposure Check

Shopify API Key Exposure Check

WordPress Version Check

.htaccess File Presence and Security Check

Index File Presence in Upload Folders Check

PrestaShop Log File Exposure Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify Contact Form CAPTCHA Protection Check

Installation Log File Exposure Check

Shopify Client Login CAPTCHA Protection Check

Shopify Terms and Conditions (T&C) Presence Check

Email Address Exposure Check

PrestaShop Version Check

WordPress Admin Access Check

Magento Backup File Exposure Check

X-Content-Type-Options: nosniff Header Check

Access to wp-cron.php Check

Upload Folder Indexing Check

robots.txt File Check

Drupal Log File Exposure Check

Shopify CSRF Protection Check

PrestaShop Backup File Exposure Check

Shopify SSL/TLS Configuration Check

PHP Error Display in Production Check

PrestaShop Admin Login Page Protection Check

SSL Certificate Check

Shopify Upload Folder Security Check

Magento Git File Exposure Check

X-Frame-Options Header Check

Shopify Version Check

Permissions-Policy Header Check

PrestaShop parameters.php File Access Check

Joomla configuration.php File Access Check

Drupal Admin Login Page Protection Check

Drupal settings.php File Access Check

CAPTCHA Presence on Public Forms Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

PHP Error Display on Joomla Check

Magento Admin Access Check

WordPress REST API Access Check

Joomla Temporary Folder (/tmp/) Access Check

Information Leak via HTTP Headers Check

Shopify Content-Security-Policy Header Check

WordPress Login Page Access Check (wp-login.php)

CAPTCHA Presence on Admin Page Check

HttpOnly Flag on Joomla Session Cookies Check

Cross-Origin-Opener-Policy Header Check

Joomla Admin Login Page Protection Check

CAPTCHA Presence on Client Login Page Check

Shopify HTTP Security Headers Check

Joomla Administrator Interface Access Check

Shopify Admin Access Restriction Check

Magento Cache Folder Access Check

Cookie Policy Page Presence Check

PHP Error Display on WordPress Check

Shopify SQL Injection Protection Check

Joomla configuration.php Exposure Check