Request a demo

Find the stray file in your OpenCart

OpenCart keeps your database password in two plain files, and your storefront in folders of code most owners never open. That's where an attacker's changes go, and where they stay unnoticed. Alertica checks your shop's files every day and tells you the day something changes. There's nothing to install, our team sets it up with you on Pro, and there's a free plan that never expires.

Request a demo See what it watches
  • Ready-made checks for OpenCart 2 to 4
  • Free plan that never expires

Three steps, no code

  1. Connect your shop

    Use the FTP, FTPS or SFTP login from your hosting panel. Alertica only reads the list of files, so a read-only login works, and it finds OpenCart by itself.

  2. Turn on OpenCart Protection

    Pick OpenCart as the platform. The checks are ready-made for versions 2 to 4, from config.php to the storefront.

  3. Choose who hears about it

    Add who should get alerts, by email or SMS, with Slack coming soon. The first scan lists any suspicious file that's already there.

What gets watched in OpenCart

The checks are set for OpenCart's own folders, and stay quiet about the files it rewrites all day.

  • The two files with your password

    OpenCart keeps your database password in two config files. Alertica alerts you when either one changes, and when a copy turns up that anyone could download.

  • Your storefront and checkout

    Any file added, changed or deleted in the code your customers see. That includes the checkout, where a card skimmer would be added.

  • OpenCart itself and the admin

    Any file added, changed or deleted in OpenCart's own code and your admin panel. Your own updates show up too.

  • Scripts among your product photos

    The image folder should only hold product photos, and the upload folder the files customers attach to orders. A script in either is a red flag.

  • Files that shouldn't be there

    Known hacking tools, a file your host's virus scanner flagged, and database backups anyone could download.

  • Signs of a mass attack

    More than 200 files changed or 100 deleted in one scan, and the files ransomware leaves behind.

Why OpenCart shop owners pick Alertica

  • Nothing to switch off

    A security extension runs inside OpenCart, where an attacker with access to the files can turn it off. Alertica runs on our servers and only logs in to read.

  • Alerts you can act on

    Each alert names the file, what the check found and what to do about it, in words a shop owner can follow without a developer.

  • Secure by design

    Alertica reads file names, sizes and timestamps, and never opens a file. Your login is encrypted with AES-256, and every account uses two-step sign-in.

  • Set up with you

    Setup and onboarding come with Pro and Enterprise. We connect the shop with you, turn on OpenCart Protection and go through the first scan.

Questions OpenCart owners ask

What OpenCart Protection watches, what it doesn't, and what it costs.

Running an older or customised OpenCart? Ask us about your shop
  • Which OpenCart versions does it support?

    The ready-made checks cover OpenCart 2.x, 3.x and 4.x, on any host where you can log in over SFTP, FTPS or FTP. Alertica finds the shop folder by itself, so there are no paths to type.

  • I renamed my admin folder. Does that matter?

    The admin checks look for a folder named admin, so with a renamed one they're skipped. The rest of the shop is still watched, and the site-wide security check still looks for suspicious files in the renamed folder.

  • Will an OpenCart update set off an alert?

    Yes. An update changes files in system, catalog and admin, and the alert shows you the change was yours. The image cache and OpenCart's cache, logs and sessions are skipped, so they don't add noise.

  • Can Alertica catch a card skimmer?

    It catches one added to your files, such as a changed checkout file or a new script in the image folder. A skimmer stored in the database is out of its reach, so pair it with a scanner that reads the database.

  • What does it cost?

    Free covers one shop with a weekly scan and the site-wide security check. Pro is $20 per shop per month and runs every check daily, with SMS alerts and setup and onboarding with our team. Compare plans

  • Do I need to install anything?

    No. Alertica connects with the FTP or SFTP login you give it and only lists files. There's no extension, no agent and nothing on the server to keep updated.

Ready-made checks for other platforms

Find out what's in your shop's folders

Tell us about your shop. We'll turn on OpenCart Protection with you and read the first scan together.

Request a demo