Magento official security scan tool

[goivvy]

Magento just launched security scan tool https://account.magento.com/scanner/ .

You need to have an account with Magento to use it.

Found on reddit https://www.reddit.com/r/Magento/co...medium=hot&utm_source=reddit&utm_name=Magento .

I thought I would share it here.

 

[Tim Ford]

Check out www.magereport.com as well. You don't need an account to scan.

Also regularly scans your site and can notify you of issues

Tim

 

[goivvy]

The official tool can hint you about server security like using TLSv1.0 and other things. It can do regular scans as well. I would say it is more functional than magereport. Thanks anyway.

 

[Mark_Taylor_]

Magereport scan seems better to me, the official magento scan is flagging up a missing security patch which i know to have been applied, whereas magereport is showing it as ok.