What We Scan For
Understanding potential threats is the first step toward a more secure website. Our scanner looks for several common vulnerabilities:
Outdated Software
Many websites are built on platforms like WordPress, Joomla, or Magento. Hackers often exploit known vulnerabilities in outdated versions of this software, plugins, or themes. Keeping everything updated is one of the most critical security practices.
Missing Security Headers
HTTP security headers are instructions your server sends to a visitor's browser, telling it how to behave securely. Headers like HSTS (HTTP Strict Transport Security) and CSP (Content Security Policy) can prevent common attacks. Our scanner checks if these important headers are present and correctly configured.
Cross-Site Scripting (XSS) Information
XSS is a vulnerability where an attacker can inject malicious scripts into a website, which then run in the browsers of other visitors. This can be used to steal session cookies, deface websites, or redirect users to malicious sites. We check for common misconfigurations that might leave a site vulnerable to this type of attack.
SQL Injection Information
If a website uses a database, it might be vulnerable to SQL Injection. This occurs when an attacker can pass malicious SQL code through a web form or URL parameter, potentially allowing them to view, modify, or delete data from the database. Proper data sanitization is the key to prevention.