Sansec
Sansec security research — Magento vulnerability disclosures, malware analysis, and store security tools from the leading Magento security firm.
-
https://github.com/sansecio/magevulndb
Magento is an attractive target for payment skimmers and the number of attacks has increased steadily since 2015. In 2018, attackers shifted from Magento core exploits (eg, Shoplift, brute force attacks on admin passwords) to 3rd party software components. This poses a practical problem: there is no central place where one can (programmatically) find out whether a particular module version has known security issues. This repository solves that!
3621124 Mar 2026
-
https://sansec.io/guides/sansec-shield
Sansec Shield is a smart Web Application Firewall (WAF) that provides real-time protection for Magento and Adobe Commerce stores. Unlike traditional WAFs that rely on generic rules, Sansec Shield is integrated with the Magento core architecture and benefits from Sansec's famous expertise in Magento security. This makes our WAF the most effective solution to defend your Magento store.
-
https://github.com/integer-net/magento2-sansec-watch
This module allows the integration CSP rules from Sansec Watch (https://sansec.watch/) into Magento without the need for file manipulations and a re-deployment
339 -
https://sansec.io/watch
Sansec Watch integrates with the Magento CSP system. It detects third-party activity to complement you existing CSP ruleset. CSP changes are automatically synchronized, no need to redeploy your store.
11 Oct 2024
