Exposed Log Scanner
Probes for log files accessible over HTTP that leak paths, error traces and internal data.
What it checks
This scanner probes for log files accessible over HTTP on your site, such as error or server activity logs. It detects when those files have been left downloadable instead of being protected.
Why it matters
Logs often contain internal system paths, detailed error traces and sometimes user data or request parameters. All of that gives an attacker a map of how your site works inside and where to try getting in.
How to fix it
Move log files out of the public directory or block their access from the web server. Also check that your application isn't writing logs into a folder served over HTTP, and limit how much error detail is shown in production.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free