See what's hidden in your PrestaShop

When a PrestaShop shop is broken into, the attacker's code lands in a file: a script dropped in the shop folder, or a few lines added to a payment module. The shop keeps selling and the back office looks the same. Alertica checks your shop's files every day and tells you the day one changes. There's nothing to install, our team sets it up with you on Pro, and there's a free plan that never expires.

  • Ready-made checks for PrestaShop 1.6 to 8
  • Free plan that never expires

Set up in three steps

  1. Connect your shop

    Add the shop with an SFTP, FTPS or FTP login. Alertica only lists files, so give it a read-only login, and it finds the PrestaShop folder by itself.

  2. Turn on PrestaShop Protection

    Pick PrestaShop as the platform. The checks cover 1.6, 1.7 and 8, and skip any folder your version doesn't have.

  3. Choose who hears about it

    Pick who gets the alerts, by email or SMS, with Slack coming soon. The first scan reports any suspicious file already in the shop.

What gets watched in PrestaShop

The checks are set for PrestaShop's own folders, so there's nothing to choose. Each alert says what was found and what to do about it.

  • Your modules, payment modules included

    A few lines added to a payment module can copy every card that goes through it. Any change to your modules raises an alert, your own updates included.

  • Your database password

    PrestaShop keeps it in one settings file (parameters.php, or settings.inc.php on 1.6). Alertica alerts you when your settings change, and when a copy of the file turns up.

  • Scripts among your product images

    The folders for product images and customer downloads should never hold a script. If one appears, you get an alert.

  • PrestaShop itself and your theme

    Any file added or changed in PrestaShop's own code or your theme. Your own upgrades show up too, so you can tell them from someone else's.

  • The files every visit runs through

    The files in your shop's main folder start every page load, so a line added there reaches every visitor.

  • Files that shouldn't be there

    Known hacking tools, scripts disguised as images, and database backups anyone could download.

Why PrestaShop merchants pick Alertica

  • Outside the back office

    A security module runs inside PrestaShop, so whoever gets into the shop's files can disable it. Alertica runs on our servers and only logs in to read.

  • Fits your version

    The checks know where 1.6 keeps its settings and where 1.7 and 8 keep theirs, so an older shop is covered while you plan the upgrade.

  • Secure by design

    Alertica reads file names, sizes and timestamps, never their contents. The login it uses is encrypted with AES-256, and every account uses two-step sign-in.

  • Set up with you

    Setup and onboarding come with Pro and Enterprise. We connect the shop with you, turn on the PrestaShop checks and read the first scan together.

Questions PrestaShop merchants ask

What PrestaShop Protection covers, what it doesn't, and what it costs.

Running a multistore or a heavily customised shop? Ask us about your setup
  • Which PrestaShop versions does it support?

    The ready-made checks cover PrestaShop 1.6, 1.7 and 8. They look for your settings in the right place for each version and skip folders your shop doesn't have, wherever you can log in over SFTP, FTPS or FTP.

  • Will it tell me if a module was used to break in?

    It tells you what happened after: a module's files changing, or a new script in the shop folder or among your images. It doesn't test modules for known flaws, so keep them updated and use it to catch what gets through.

  • Will updating a module set off an alert?

    Yes. An update changes the module's files, and the alert shows you the change was yours. Cache, logs, img/tmp and vendor are skipped, since PrestaShop rewrites them all the time.

  • Is it safe to give Alertica access to our shop?

    Yes. Alertica is agentless and read-only: it lists files and never opens, changes or deletes them. The login is encrypted with AES-256, and every Alertica account uses two-step sign-in.

  • What does it cost?

    Free covers one shop with a weekly scan and the site-wide security check. Pro is $20 per shop per month and runs every check daily, with SMS alerts and setup and onboarding with our team. Compare plans

  • Do I need to install a module?

    No. Alertica connects with the SFTP or FTP login you give it and only lists files. There's no module, no agent and nothing on the server to keep updated.

Ready-made checks for other platforms

See what your shop's first scan finds

Tell us about your shop. We'll set up PrestaShop Protection with you and go through the first scan together.