Data exposure
Directory listing disabled
Configuration files, backups and source code that should never be public.
Why it matters
Anyone can browse folder contents - uploads, backups, logs and files that were never meant to be linked - and search engines may index them.
How to fix it
Quick fix · under 1 hour- Turn off automatic directory indexes in the web server.
- Add an empty index file to folders that must stay reachable.
- Reload the web server and re-run the scan to confirm.
nginx
autoindex off;
Apache (.htaccess)
Options -Indexes
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free