Sensitive Files

WordPress Backup File Exposure Check

Backup files (backup.sql, backup.zip) can expose your entire site. Detect their presence and learn how to secure them.

What this test checks

This test checks whether WordPress backup files (backup.sql, backup.zip, backup.tar, backup.gz, etc.) are publicly accessible. These files contain your entire database, files, and sometimes credentials. Their exposure allows an attacker to steal all your data, copy your site, or destroy it.

Our recommendation

Place all backup files outside your site's public directory. If you must store them on the server, protect them with authentication (e.g., password) or with a .htaccess file (Deny from all). Delete obsolete backups. Use secure external backup services (e.g., UpdraftPlus, BackupBuddy) that store data in private cloud spaces.

Security tests

View all tests

Communication Security

WordPress Backup File Exposure Check

What this test checks

Our recommendation

Read more

HSTS Header Check (HTTP Strict Transport Security)

CMS Vulnerability Check

Known CVE Vulnerability Check on Used Technologies

CNIL Mention in Privacy Policy Check

Magento env.php File Access Check

Shopify CSRF Protection Check

Drupal Log File Exposure Check

PrestaShop Admin Login Page Protection Check

Joomla Admin Access Check

WordPress Version Check

Plaintext Password Exposure Check

Shopify API Key Exposure Check

WordPress Debug Log Exposure Check

Joomla Admin Login Page Protection Check

Drupal Backup File Exposure Check

Database Backup File Exposure Check

Shopify HTTPS Redirect Check

Malicious File Presence Check in Upload Folders

Shopify Log File Exposure Check

X-Content-Type-Options: nosniff Header Check

xmlrpc.php Access Check

Clear-Site-Data Header Check

Login Attempt Limiting Check

Magento Cache Folder Access Check

API Key Exposure Check

Joomla Log File Exposure Check

Shopify X-Frame-Options Header Check

Index File Presence in Upload Folders Check

Configuration File Exposure Check

Shopify SSL/TLS Configuration Check

Email Address Exposure Check

Shopify Registration CAPTCHA Protection Check

Cross-Origin-Embedder-Policy Header Check

HttpOnly Flag on Joomla Session Cookies Check

WordPress Heartbeat API Check

Database Administration Tools Access Check

Shopify Client Login CAPTCHA Protection Check

Directory Indexing Check

Shopify REST API Exposure Check

Information Leak via HTTP Headers Check

CAPTCHA Presence on Password Reset Form Check

admin-ajax.php Accessibility Check

Magento Backup File Exposure Check

PrestaShop Backup File Exposure Check

PHP Error Display on Magento Check

SQL Query Exposure Check

Cookie Security Check

PHP Error Display in Production Check

Shopify XSS Protection Check

WordPress REST API Access Check

Joomla REST API Access Check

Shopify SQL Injection Protection Check

Upload Folder Protection Check (.htaccess, index.html files)

PrestaShop Version Check

Shopify Version Check

PHP Error Display on WordPress Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

WordPress Admin Access Check

Cookie Policy Page Presence Check

Joomla Backup File Exposure Check

CAPTCHA Presence on Contact Form Check

Magento Version Check

Server Configuration Information Check

Shopify X-Content-Type-Options Header Check

Permissions-Policy Header Check

Shopify Content-Security-Policy Header Check

PHP Error Display on Drupal Check

Cross-Origin-Opener-Policy Header Check

Drupal Admin Access Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

WordPress Theme Editor Access Check

Magento Git File Exposure Check

Drupal Version Check

Magento Admin Access Check

Server Status Pages Access Check

PrestaShop parameters.php File Access Check