← All checks
SecurityTypical severity: Medium

Directory Listing Scanner

Checks whether folders like /uploads or /backup expose a browsable listing of all their files.

What it checks

This scanner checks whether folders like /uploads or /backup display a browsable list of every file they contain. It happens when the server auto-generates an index because no default page is found. The scanner only looks at whether that listing is visible.

Why it matters

An open listing lets anyone browse your files and discover documents, backups or assets you never meant to show. It turns private folders into a public directory that is easy to explore. It often reveals files you had forgotten were even there.

How to fix it

Disable directory listing in your server configuration, an option usually called autoindex or directory browsing. Place a default index file in folders that need to stay accessible. And avoid keeping private files in publicly served paths.

Check it on your site

Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.

Scan my site free

Related checks