All Security Checks
ContentCritical PriorityPro
Sensitive Files Exposure
Common sensitive files like .env, .git, backups, and config files should not be publicly accessible.
Why It Matters
These files often contain credentials, API keys, database passwords, and other secrets. Exposure leads directly to system compromise.
How We Check
We probe for common sensitive files and directories including .env, .git, config files, backup archives, and database dumps.
How to Fix
Configure your web server to block access to sensitive files. Use .htaccess rules or nginx location blocks. Move sensitive files outside the web root.
Related Security Checks
Related Tool
Website Vulnerability Scanner
Run all 7 related checks with our free website vulnerability scanner
Check Your Website Now
Run a free security scan to check for Sensitive Files Exposure issues and 58+ other security vulnerabilities.
Scan Your Website Free