Sensitive Files

Shopify Sensitive File Exposure Check

Shopify configuration files (config/settings_data.json, .shopify, config.yml) can expose critical data. Detect their presence and learn how to secure them.

What this test checks

This test checks whether sensitive Shopify files (config/settings_data.json, .shopify, config.yml, shopify.yml) are publicly accessible. These files may contain configuration settings, credentials, or information about your store. Their exposure can compromise your e‑commerce site security.

Our recommendation

Ensure these files are not accessible via URL. Place them outside the public directory or configure the server to block them. Regularly check their accessibility.

Security tests

View all tests

Sensitive Files

Shopify Sensitive File Exposure Check

What this test checks

Our recommendation

Read more

Magento Backup File Exposure Check

Index File Presence in Upload Folders Check

Information Leak via HTTP Headers Check

Email Address Exposure Check

PrestaShop Admin Access Check

Shopify SQL Injection Protection Check

Upload Folder Indexing Check

Shopify Content-Security-Policy Header Check

Referrer-Policy Header Check

Shopify Upload Folder Security Check

PrestaShop Upload Folder Indexing Check

Drupal Version Check

admin-ajax.php Accessibility Check

Joomla Upload Folder Indexing Check (images/)

Magento Configuration File Exposure Check

X-Content-Type-Options: nosniff Header Check

xmlrpc.php Access Check

Drupal Temporary Folder (tmp/) Access Check

Cross-Origin-Resource-Policy Header Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Version Check

Joomla Administrator Interface Access Check

Shopify API Key Exposure Check

Clear-Site-Data Header Check

Shopify File Upload Security Check

WordPress Version Check

Joomla Cron Access Check

PrestaShop Backup File Exposure Check

Malicious File Presence Check in Upload Folders

Shopify Contact Form CAPTCHA Protection Check

Development File Exposure Check

Shopify Error Display Check

Plaintext Password Exposure Check

Shopify Backup File Exposure Check

Drupal Log File Exposure Check

Shopify Permissions-Policy Header Check

Magento Log File Exposure Check

Cross-Origin-Opener-Policy Header Check

HttpOnly Flag on Joomla Session Cookies Check

Login Attempt Limiting Check

API Key Exposure Check

CAPTCHA Presence on Password Reset Form Check

CNIL Mention in Privacy Policy Check

PrestaShop Admin Login Page Protection Check

WordPress Debug Log Exposure Check

Shopify Cookie Consent Banner Presence Check

CAPTCHA Presence on Admin Page Check

Known CVE Vulnerability Check on Used Technologies

Shopify X-Frame-Options Header Check

WordPress Admin Access Check

Access to wp-cron.php Check

PrestaShop Version Check

Shopify Storefront API Exposure Check

Shopify Registration CAPTCHA Protection Check

Shopify HSTS Header Check

Configuration File Exposure Check

wp-config.php File Access Check

Drupal settings.php File Access Check

Installation Log File Exposure Check

WordPress Backup File Exposure Check

SQL Query Exposure Check

Cookie Consent Banner Presence Check

Privacy Policy Page Presence Check

Shopify Environment Information Exposure Check

Cache Policy Check (Cache-Control, Pragma, Expires)

.htaccess File Presence and Security Check

Drupal Admin Access Check

Shopify CSRF Protection Check

Permissions-Policy Header Check

Magento env.php File Access Check

Server Status Pages Access Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Drupal Backup File Exposure Check

Joomla configuration.php File Access Check

Shopify Client Login CAPTCHA Protection Check

Database Administration Tools Access Check