Documentation

Install, activate, and operate PrestaShop Security Engine on PrestaShop 1.7 and 8.x.

Installation

  1. Purchase and download the module ZIP from your account.
  2. In PrestaShop back office, open Modules → Module Manager.
  3. Upload the ZIP and install PrestaShop Security Engine.
  4. Open the module from the Modules list or the Security Engine menu entry.

Compatible with PrestaShop 1.7 and 8.x. Keep a shop backup before installing any security module.

Activation

  1. Copy your license key from the purchase email or account dashboard.
  2. In the module’s license settings, enter the key and activate for the current store domain.
  3. Confirm status shows active and the normalized domain matches your production host.

Activation is domain-bound with a configured activation limit. Staging hosts such as localhost may be handled separately depending on server license configuration. See licensing.

Dashboard

The security dashboard summarizes score, critical findings, recent blocks and logins, WAF activity, integrity, vulnerabilities, and configuration cues. Use it as your daily operational view: start with critical items, then review recent events.

Malware scanning

Run a malware / suspicious-file scan from the module. Review flagged paths carefully — heuristics can surface obfuscated or unusual PHP that is legitimate in rare cases. Quarantine or remove only after you understand the finding. Re-scan after cleanup.

File integrity

Create or refresh a baseline for critical paths, then run integrity checks to list unexpected changes. After intentional updates (PrestaShop core, modules, themes), review differences and update the baseline so future alerts stay meaningful.

WAF

Enable the front-office Web Application Firewall to inspect requests for SQLi/XSS-style probes. Review attack logs and temporary IP locks. If a legitimate integration is blocked, adjust rules carefully rather than disabling protection wholesale.

Vulnerability detection

Run vulnerability checks to compare installed modules against Friends Of Presta advisories and known fixed versions. Prioritize modules with public advisories; upgrade or replace them according to your change process.

Brute-force protection

Keep back-office login protection enabled. Review failed login attempts and locked IPs. Combine with strong passwords and 2FA for employees. If you are locked out from a shared office IP after testing, wait for the lock window or unlock from a trusted admin session when available.

2FA

Enable TOTP two-factor authentication for back-office employees. Each user completes enrollment with an authenticator app. Store recovery procedures offline for your team so a lost phone does not permanently lock staff out.

Attack logs

Use attack and security event logs to investigate spikes: WAF blocks, login abuse, and related signals. Export or screenshot evidence if you need to share with your host or agency. Logs support investigation; they are not a substitute for hosting-level forensics.

Configuration

Configure geo/Tor rules, disposable-email handling, security headers, anti-fake cart, backups, and protection toggles from the module settings. Change one area at a time and verify storefront and checkout still work for legitimate customers.

Troubleshooting

  • Module missing after upload: Confirm ZIP structure and that the module folder name is correct for PrestaShop.
  • License activation fails: Check domain spelling, HTTPS connectivity to the licensing API, and that the key is active (not revoked).
  • False-positive scan: Review the file content; whitelist or baseline only when you trust the path.
  • WAF blocks a payment or tracking script: Inspect the blocked request pattern; refine rules instead of turning WAF off permanently.
  • Performance concerns: Schedule heavy scans off-peak; keep monitoring features enabled for continuous protection.

License management

View your key, status, and activations in your customer account. Deactivate before moving to a new production domain when your activation limit requires it. Support can help with legitimate store migrations.

Updates

Product updates for the current major line are published on the changelog. Download the latest ZIP from your account, then upgrade the module in PrestaShop Module Manager. Re-run integrity baselines after major upgrades.

Need support?