Checks if directory listing is disabled on the server.
Directory browsing is a web server feature that, when enabled, lists all the files and folders within a directory when no index file (like 'index.html') is present. Essentially, it turns your server into an open file browser for anyone who navigates to a folder URL.
This should almost always be disabled on production websites. When enabled, it can inadvertently expose sensitive files (like configuration files, backup files, or scripts), reveal information about your site's internal structure to potential attackers, or make private files publicly downloadable.
Directory browsing is a well-known security vulnerability that can lead to information disclosure, unauthorized access to sensitive files, and give attackers valuable reconnaissance information about your server setup. Many security scanners flag this as a medium-to-high severity issue.
Run a free audit to see how your site performs on Directory Browsing and 159 other checks.
Start Free AuditVerifies the validity and configuration of the SSL certificate.
Checks if the site is secured with a valid SSL certificate.
Ensures that HTTP traffic is automatically redirected to HTTPS.
Checks for insecure (HTTP) resources on a secure (HTTPS) page.