Security Scan examines your PrestaShop store locally and returns a security score, grade and prioritised findings at no charge. Installation and one button start the first scan, with no external service needed for the examination.
Exposed backups, malicious files and known module weaknesses are difficult to judge from a working storefront. The scan checks those risks alongside unsafe code patterns and security settings, giving each finding a location and severity.
You schedule repeat scans and review stored history; a new critical finding triggers an alert. Every finding includes ordered manual fix steps. The examination is read-only, keeps its findings in the shop and neither blocks traffic nor patches files or changes settings.
A fresh scan after a repair checks the same risks again, making your progress visible in the recorded findings and score.
Security Scan is a free, local, read-only security examination of a PrestaShop store with a clear verdict.
Five areas in one pass. Known vulnerabilities: your PrestaShop version and its end-of-life status, the risk of an outdated server platform, and every installed module compared against curated advisory data. Exposure: public version-control folders, backup archives, database dumps, leftover install directories, diagnostic files and directory listing.
Then malware indicators, web shells, hidden loaders, code where only images should live; risky code patterns inside modules; and hardening posture, from secure cookies and admin protection signals to debug settings and abandoned module code that still sits reachable on disk.
A card, not a codeword. Each finding states its severity, what was found and where, why it matters in plain terms, and the ordered steps to fix it manually. An exposed dump names the file; a vulnerable module names the module and version.
The report is triage you can act on the same afternoon, alone or handed to whoever maintains the shop.
The scan runs inside your shop and reads local state; enabling the optional fleet connector sends scan reports to the central dashboard. The findings stay in your shop unless fleet reporting is enabled, and the module's source is open to read.
The module is also honest about its role: it detects and explains, and it deliberately does not block traffic, patch files or change settings behind your back.
Every scan is stored, so the score becomes a line over time and security work becomes visible progress. Scheduled scans repeat the examination on their own, and when a new critical finding appears, an alert reaches you instead of waiting to be discovered.
Re-scanning after each fix confirms it worked, and after each shop change confirms nothing new opened.
An optional connector, enrolled explicitly and signed, reports scans to one central fleet dashboard and accepts remote scan triggering over the consented channel. Ten client shops become one screen.
For prevention beyond detection, the paid Security Revolution suite takes over from the same fleet view: the scanner finds, the suite defends.
Requires PrestaShop 1.7 or later and PHP 7.1 or later.
30 days return right
Plug & Play Modules
Dedicated Support First
Built and maintained by David Miller and mypresta.rocks. David Miller has worked with PrestaShop since 2013, and the company behind this shop has been registered since 3 December 2018. Every module in this catalogue is our own work, so your questions to support reach the people who wrote the code. The changelog on this page lists every update with its date.
Security Scan finds version risks, exposed files, weak hardening and malware and gives you clear manual fix steps, and Cleanup Revolution removes unused files and module leftovers. Find the risks, then clear out what you no longer need.
Security Scan checks the shop itself for weaknesses, and reCAPTCHA & hCaptcha Protection blocks bots at your login, registration, contact and newsletter forms. Stronger on the inside and at the door.
Compliance & Legal
News & Updates
News & Updates
News & Updates
News & Updates
News & Updates
