Form Security

Shopify Contact Form CAPTCHA Protection Check

Shopify contact forms are targets for automated spam. Check that a CAPTCHA is in place to protect your inbox and improve user experience.

What this test checks

This test checks whether your Shopify contact form is protected by a CAPTCHA. Without it, your form can be flooded with automated messages (spam, phishing, ads), polluting your inbox, harming your reputation, and enabling form injection attacks.

Our recommendation

Add a CAPTCHA to your Shopify contact form via a dedicated app or by configuring your store settings. Use lightweight solutions like Turnstile or reCAPTCHA v3 for a smooth user experience while blocking bots.

Security tests

View all tests

Server Configuration

Shopify Contact Form CAPTCHA Protection Check

What this test checks

Our recommendation

Read more

Server Status Pages Access Check

Shopify Terms and Conditions (T&C) Presence Check

Shopify HSTS Header Check

Shopify HTTPS Redirect Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Cookie Security Check

Shopify SQL Injection Protection Check

Magento Git File Exposure Check

Plaintext Password Exposure Check

Upload Folder Indexing Check

SSL Certificate Check

PrestaShop Backup File Exposure Check

PrestaShop Session Cookie Security Check

Shopify Client Login CAPTCHA Protection Check

Joomla Log File Exposure Check

Shopify File Upload Security Check

Magento Session Cookie Security Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Email Address Exposure Check

PHP Error Display on Drupal Check

Referrer-Policy Header Check

Cookie Consent Banner Presence Check

Shopify API Key Exposure Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Joomla Administrator Interface Access Check

WordPress Version Check

Known CVE Vulnerability Check on Used Technologies

Installation Log File Exposure Check

CAPTCHA Presence on Public Forms Check

Joomla Version Check

Shopify XSS Protection Check

Directory Indexing Check

Information Leak via HTTP Headers Check

Development File Exposure Check

Drupal Admin Access Check

X-Frame-Options Header Check

Content-Security-Policy Header Check

HSTS Header Check (HTTP Strict Transport Security)

Cookie Policy Page Presence Check

Cross-Origin-Resource-Policy Header Check

Login Attempt Limiting Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Joomla REST API Access Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

wp-config.php File Access Check

X-Content-Type-Options: nosniff Header Check

Configuration File Exposure Check

Shopify Password Reset CAPTCHA Protection Check

CNIL Mention in Privacy Policy Check

Shopify Log File Exposure Check

CAPTCHA Presence on Password Reset Form Check

WordPress Backup File Exposure Check

PrestaShop Upload Folder Indexing Check

Drupal Temporary Folder (tmp/) Access Check

Shopify phpinfo Exposure Check

Magento Admin Access Check

.htaccess File Presence and Security Check

Index File Presence in Upload Folders Check

Malicious File Presence Check in Upload Folders

Magento env.php File Access Check

Shopify Permissions-Policy Header Check

Drupal Backup File Exposure Check

Shopify Version Check

Magento Configuration File Exposure Check

Drupal Log File Exposure Check

PHP Error Display on Magento Check

PrestaShop Admin Access Restriction Check

Joomla Backup File Exposure Check

CAPTCHA Presence on Registration Page Check

WordPress Debug Log Exposure Check

WordPress Admin Access Check

Magento Admin Access Restriction Check

Shopify Upload Folder Security Check

Shopify CSRF Protection Check

Magento Cache Folder Access Check

Access to wp-cron.php Check