Security Scanner
Know your plugin risk before attackers do
Continuously audits all installed Shopware plugins for known vulnerabilities, risky permissions and outdated dependencies — with instant alerts and clear remediation.
Third-party plugins are the number-one attack surface in Shopware shops. Security Scanner matches every installed extension against an updated CVE and advisory database, statically analyses plugin code for dangerous patterns, reviews the permissions each plugin requests, and monitors your setup 24/7. When a new advisory drops that affects your shop, you know within minutes — with a clear statement: affected or not, and what to do.
What's inside
CVE & advisory matching
Your plugin set is matched against a continuously updated database of known vulnerabilities.
Static code analysis
Looks for risky patterns — SQL concatenation, unsafe deserialization, exposed admin endpoints — in every plugin zip.
Permission audit
Flags plugins that request more permissions than their feature set justifies.
Instant advisories
New vulnerability published? You get an email within minutes telling you if and how you're affected.
Compliance exports
Generate security reports for insurers, PCI-DSS checks or enterprise procurement.
Hardening guide
A prioritized, shop-specific hardening checklist based on your actual configuration.
Installation in 3 steps
- 1
Upload the plugin zip in the Extension Manager
- 2
Install & activate the plugin
- 3
Enter your license key under Extensions → My extensions
Not sure yet?
Test this plugin free for 14 days — trial key available in your dashboard right after signup.
Start free trialFrequently asked questions
Does it protect my shop actively?
It's a detection and advisory system — it tells you exactly what to update, patch or remove, and when. For active WAF protection we recommend pairing it with your infrastructure firewall.
Where does the scan run?
Code analysis runs locally in your shop; only anonymized plugin names and versions are checked against the advisory database.
Is it relevant for small shops?
Especially then — small shops rarely have someone watching advisories. This plugin is that someone.