FAQ
Straight answers about PrestaShop Security Engine — based on how the product actually works.
What is PrestaShop Security Engine?
A PrestaShop module that provides a security dashboard and score, malware and suspicious-file scanning, file integrity monitoring, WAF protection against SQLi/XSS-style probes, Friends Of Presta / CVE-oriented vulnerability checks, brute-force protection, employee 2FA, disposable-email and geo/Tor controls, backups, attack logs, security headers, and anti-fake cart protection.
Which PrestaShop versions are supported?
PrestaShop 1.7 and PrestaShop 8.x.
How is it installed?
Download the ZIP from your account after purchase, upload it in Module Manager, install the module, then open Security Engine in the back office. Full steps are in the documentation.
How does licensing work?
You receive a lifetime license key (no expiry by default) after payment is verified via Paddle webhook. The key is activated against your store domain with a configured activation limit. Licenses can be revoked if needed (for example abuse). Refunds are available within 7 days — see the refund policy. Details: licensing.
How do I activate my store?
Enter your license key in the module’s license settings and activate for the current domain. Confirm the status shows active. You can also review activations in your customer account.
Can I move my license to another store?
Yes, within your activation limit. Deactivate the old domain (or contact support for migration help), then activate on the new production host. Do not share one key across unrelated shops beyond the allowed activations.
What happens if I reinstall PrestaShop?
Reinstall the module from your downloaded ZIP, then activate the same license on the store domain again. Integrity baselines and some local settings may need to be recreated after a fresh install.
How do updates work?
Updates for the current major line are listed on the changelog. Download the latest package from your account and upgrade via Module Manager.
What happens if malware is detected?
The scanner reports suspicious files with paths and severity. You (or your agency) should inspect the files, remove or clean confirmed malicious content, rotate credentials if compromise is likely, and re-scan. The module detects and reports; remediation is a merchant/ops responsibility.
Does the module slow down my store?
Continuous protections are designed for production use. Full malware or integrity scans are heavier — run them when traffic is lower if your host is resource-constrained. If you see a regression, temporarily review WAF/geo rules and scan schedules rather than leaving the shop unprotected.
What happens if I need help?
Start with the documentation and support page, then use the contact form. Include your order email, PrestaShop version, and a clear description of the issue.
What is included in the purchase?
The full PrestaShop Security Engine feature set, customer account access to download the module and view your license, documentation, and updates for the current major line. See pricing for the complete list.