Security for Magento stores and WordPress sites
Spot an intrusion, react in the first hours, and close the doors before someone forces them.
Signs of a hack, suspicious accounts and scripts, auditing and hardening a store.
WordPress hacked? Spot a new administrator or a modified file
WordPress hacked? Spot an unknown administrator or a modified file with WP-CLI, then take back control without destroying the evidence.-
Card skimmer (Magecart) on Magento: how to spot it
A Magecart skimmer steals card details on the Magento checkout page: where it hides, the warning signs and what to do if you find one. -
Magento 2 hacked: the warning signs and what to do next
Magento 2 store hacked? The warning signs, what not to do, who to notify and how to regain control without destroying the evidence you will need. -
Magento admin accounts, integrations and API tokens: how to spot suspicious access
Unknown admin, recent integration or stray API token on Magento 2? Where to look, the warning signs and what to do without wiping the traces. -
Magento 2 security audit: a 10-point checklist
A 10-point Magento 2 security audit: version, patches, extensions, accounts, 2FA, files, backups and logs. How to check each one, and how often. -
How to secure Magento 2: the essential hardening settings
Secure Magento 2 step by step: patches, 2FA, admin URL, production mode, file permissions and security headers, ranked by impact, plus the traps to avoid.
Have your store monitored
Tocsin24 monitors the security and health of your Magento store or WordPress site, and warns you at the first sign.