Is Your WooCommerce Store Exposed?
Scan for security risks in 10 seconds — no signup, no cost.
Detect exposed login pages, xmlrpc.php, missing HTTPS, and security
headers.
🛡️ 100% Private | ✅ No data stored | ⚡ Instant results
🔍 What We Check (12 Security Tests):
Basic Security
- ✓ HTTPS: Secure connection enforcement
- ✓ Security Headers: CSP, HSTS, X-Frame-Options, and more
- ✓ Technology Detection: WooCommerce & WordPress identification
Exposure Checks
- ⚠ Login Page: wp-login.php accessibility
- ⚠ XML-RPC: xmlrpc.php brute-force vector
- ⚠ User Enumeration: REST API user disclosure
Critical Exposures
- ✗ Debug Log: wp-content/debug.log leakage
- ✗ .git Directory: Source code exposure
- ✗ Version Disclosure: readme.html & generator meta
Additional Checks
- ○ Directory Listing: wp-content/uploads exposure
- ○ Server Headers: Technology disclosure (Server, X-Powered-By)
- ○ robots.txt: SEO & crawler configuration
📊 Security Score & Grading
Your site receives a score from 0-100 based on the security checks above. Critical issues have the highest impact on your score.
A: 90-100
B: 80-89
C: 70-79
D: 60-69
F: Below 60