Catch the back door in your Magento store
Hackers who break into a Magento store often leave a file behind: a back door that lets them in again, to steal card details or take the store down. From your admin panel, everything looks fine. Alertica checks your store's files every day and tells you the day something appears. There's nothing to install, our team sets it up with you on Pro, and there's a free plan that never expires.
- Ready-made checks for Magento 2
- Free plan that never expires
Live in three steps
-
Connect your store
Add the store with an SFTP, FTPS or FTP login. Alertica only lists files, so a read-only login is enough, and it finds the Magento folder by itself.
-
Turn on Magento 2 Protection
Pick Magento 2 as the platform. The checks are ready-made, so there are no rules to write and no folders to choose.
-
Choose who hears about it
Add the people who should get alerts, by email or SMS, with Slack coming soon. The first scan reports any suspicious files already on the server.
What gets watched
The checks are set for Magento's own folders. A suspicious-file alert says what was found and what to do about it.
-
Your store's secret keys
env.php holds your database password and your store's encryption key. Alertica alerts you when anything in app/etc changes, and when a copy like env.php.bak appears.
-
Scripts hidden among your images
pub/media should only hold product images and documents. A script there is a red flag, so a PHP file, a program or a new .htaccess raises an alert.
-
The files every page runs through
index.php, .htaccess and the other files that start every page load. Code slipped into one of these runs for every visitor.
-
Your custom code and theme
Any file added, changed or deleted in your modules (app/code) or theme (app/design). Your own deploys show up too, so you can tell your changes from someone else's.
-
Files that shouldn't be there
Known hacking tools, files in disguise like invoice.php.jpg, database backups anyone could download, and developer leftovers such as a .git folder.
-
Signs of a mass attack
More than 200 files changed or 100 deleted in one scan, and the file names ransomware leaves behind.
Why Magento teams pick Alertica
-
Nothing to switch off
A security extension runs inside Magento, so an attacker with access to the files can disable it. Alertica runs on our servers and only logs in to read.
-
Secure by design
Alertica reads file names, sizes and timestamps, never what's inside. The login it uses is encrypted with AES-256, and every account uses two-step sign-in.
-
Set up with you
Setup and onboarding come with Pro and Enterprise. We connect your store with you, turn on the Magento checks and go through the first scan together.
-
Proof of every check
Scan history keeps every scan, including the ones that found nothing, so you can show when the store was last checked and what it found.
Questions Magento teams ask
What Magento 2 Protection covers, and what it costs.
-
Is Alertica a Magento malware scanner?
Alertica is file monitoring built for Magento. Instead of hunting for known bad code, it alerts when files change and when names appear that shouldn't be in a store, so it catches a new script in pub/media or a changed env.php whatever code is inside. Some skimmers live in the database rather than in files, so pair it with a scanner that reads the database.
-
Is it safe to give Alertica access to our store?
Yes. Alertica is agentless and read-only: it lists files and never opens, changes or deletes them, so a read-only login is all it needs. The login is encrypted with AES-256, and every Alertica account uses two-step sign-in.
-
Does it work with Adobe Commerce?
Yes. The checks cover Magento Open Source and Adobe Commerce 2.x, wherever you can log in over SFTP, FTPS or FTP. Magento 1 isn't covered by the ready-made checks.
-
Will every deploy set off an alert?
A deploy that changes app/code or a theme raises an alert, which tells you the change was yours. The folders Magento rewrites on every deploy (vendor, generated, var and pub/static) are skipped, so they don't add noise.
-
What does it cost?
Free covers one store with a weekly scan and the site-wide security checks. Pro is $20 per store per month and runs every check daily, with SMS alerts and setup and onboarding with our team. Compare plans
-
Do I need to install anything on the server?
No. Alertica connects with the SFTP or FTP login you give it and only lists files. There is no extension, module or agent to install, and nothing on the server to keep updated.
Ready-made checks for other platforms
See what the first scan finds
Tell us about your store. We'll set up Magento 2 Protection with you and go through the first scan together.