Header Security

Shopify HTTP Security Headers Check

HTTP security headers are essential to protect your Shopify store. Check their presence to strengthen your security posture.

What this test checks

This test checks for the presence of essential security headers on your Shopify store (HSTS, X-Frame-Options, CSP, etc.). These headers protect against clickjacking, XSS, MIME sniffing, and ensure secure (HTTPS) connections. Missing headers expose your site to common vulnerabilities.

Our recommendation

Add appropriate security headers via your server configuration or using a dedicated Shopify app. Use a tool like SecurityHeaders.com to analyse your configuration and identify missing headers.

Security tests

View all tests

Sensitive Files

Shopify HTTP Security Headers Check

What this test checks

Our recommendation

Read more

PrestaShop Log File Exposure Check

Shopify Password Reset CAPTCHA Protection Check

X-Frame-Options Header Check

Joomla Admin Login Page Protection Check

Clear-Site-Data Header Check

Shopify Environment Information Exposure Check

Shopify XSS Protection Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Joomla configuration.php File Access Check

Index File Presence in Upload Folders Check

Installation Log File Exposure Check

Drupal Log File Exposure Check

Joomla configuration.php Exposure Check

.htaccess File Presence and Security Check

Shopify X-Frame-Options Header Check

Shopify Backup File Exposure Check

Shopify Error Display Check

PrestaShop Admin Access Check

robots.txt File Check

Shopify Permissions-Policy Header Check

Directory Indexing Check

Magento Admin Login Page Protection Check

PHP Error Display on WordPress Check

Drupal Temporary Folder (tmp/) Access Check

Drupal settings.php File Access Check

CORS Configuration Check (Access-Control-Allow-Origin)

HSTS Header Check (HTTP Strict Transport Security)

Magento Configuration File Exposure Check

PrestaShop Admin Login Page Protection Check

Shopify phpinfo Exposure Check

WordPress Admin Access Check

admin-ajax.php Accessibility Check

API Key Exposure Check

CNIL Mention in Privacy Policy Check

Cross-Origin-Embedder-Policy Header Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Privacy Policy Page Presence Check

PrestaShop Version Check

Joomla Temporary Folder (/tmp/) Access Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify HSTS Header Check

Shopify File Upload Security Check

PrestaShop parameters.php File Access Check

PrestaShop Admin Access Restriction Check

Permissions-Policy Header Check

Magento Version Check

WordPress Backup File Exposure Check

Joomla Administrator Interface Access Check

Database Administration Tools Access Check

Joomla Upload Folder Indexing Check (images/)

Joomla Cron Access Check

Access to wp-cron.php Check

Shopify SSL/TLS Configuration Check

Shopify Content-Security-Policy Header Check

Drupal Admin Access Check

Cross-Origin-Resource-Policy Header Check

X-Content-Type-Options: nosniff Header Check

Magento Git File Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

WordPress Login Page Access Check (wp-login.php)

Cookie Security Check

Cookie Consent Banner Presence Check

Shopify CSRF Protection Check

PHP Error Display on Magento Check

Magento Admin Access Restriction Check

Joomla Version Check

Drupal Backup File Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Known CVE Vulnerability Check on Used Technologies

Joomla Log File Exposure Check

Joomla Admin Access Check

Shopify Password Protection Check

Server Status Pages Access Check

Malicious File Presence Check in Upload Folders

Shopify Storefront API Exposure Check

Two-Factor Authentication (2FA) Check