Form Security

Shopify CSRF Protection Check

CSRF attacks can manipulate your customers' actions on your store. Check that CSRF tokens are used to protect forms and sensitive requests.

What this test checks

This test checks for the presence of CSRF tokens in forms and requests on your Shopify store. Insufficient CSRF protection can allow attackers to perform unauthorised actions (e.g., account modifications, purchases) using an authenticated user's session.

Our recommendation

Ensure all sensitive forms and requests on your Shopify store use CSRF tokens. Use Shopify's built‑in security mechanisms and verify the configuration of third‑party apps.

Security tests

View all tests

Legal Compliance

Shopify CSRF Protection Check

What this test checks

Our recommendation

Read more

Cookie Policy Page Presence Check

Development File Exposure Check

CNIL Mention in Privacy Policy Check

admin-ajax.php Accessibility Check

Shopify Cart Endpoint Exposure Check

WordPress Login Page Access Check (wp-login.php)

Joomla Cron Access Check

PrestaShop parameters.php File Access Check

CMS Vulnerability Check

Joomla Admin Access Check

Joomla REST API Access Check

Shopify Log File Exposure Check

Information Leak via HTTP Headers Check

CAPTCHA Presence on Contact Form Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Access to wp-cron.php Check

WordPress Version Check

CAPTCHA Presence on Registration Page Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

PHP Error Display in Production Check

Magento Log File Exposure Check

Joomla configuration.php File Access Check

Shopify Registration CAPTCHA Protection Check

PrestaShop Backup File Exposure Check

Shopify X-Content-Type-Options Header Check

Magento Configuration File Exposure Check

PHP Error Display on Joomla Check

Database Administration Tools Access Check

HttpOnly Flag on Joomla Session Cookies Check

Installation Log File Exposure Check

Shopify REST API Exposure Check

Shopify Admin CAPTCHA Protection Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

PrestaShop Upload Folder Indexing Check

Magento Version Check

Joomla Log File Exposure Check

Shopify Referrer-Policy Header Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify Storefront API Exposure Check

Magento Git File Exposure Check

Shopify Backup File Exposure Check

Cross-Origin-Opener-Policy Header Check

Upload Folder Protection Check (.htaccess, index.html files)

Content-Security-Policy Header Check

.htaccess File Presence and Security Check

Known CVE Vulnerability Check on Used Technologies

Configuration File Exposure Check

Joomla Backup File Exposure Check

Joomla Upload Folder Indexing Check (images/)

Upload Folder Indexing Check

WordPress Heartbeat API Check

Magento Session Cookie Security Check

Email Address Exposure Check

Shopify Admin Access Restriction Check

Shopify Content-Security-Policy Header Check

Drupal Admin Access Restriction Check

WordPress Admin Access Check

X-Frame-Options Header Check

Shopify Sensitive File Exposure Check

Drupal Backup File Exposure Check

Joomla Admin Login Page Protection Check

PrestaShop Admin Access Check

Shopify Contact Form CAPTCHA Protection Check

Shopify HTTPS Redirect Check

Drupal Version Check

Shopify Environment Information Exposure Check

WordPress Backup File Exposure Check

PrestaShop Admin Access Restriction Check

SQL Query Exposure Check

Shopify Client Login CAPTCHA Protection Check

PrestaShop Log File Exposure Check

Shopify File Upload Security Check

Joomla Administrator Interface Access Check

Server Status Pages Access Check

Drupal Log File Exposure Check

Directory Indexing Check