{"id":13720491,"url":"https://github.com/gwillem/magento-security-resources","last_synced_at":"2025-04-10T03:42:29.872Z","repository":{"id":151001445,"uuid":"205862260","full_name":"gwillem/magento-security-resources","owner":"gwillem","description":"Crowd-sourced resources to help merchants mitigate and prevent Magento security incidents","archived":false,"fork":false,"pushed_at":"2023-01-03T09:37:06.000Z","size":7,"stargazers_count":11,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-04-04T21:46:06.159Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gwillem.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-09-02T13:23:17.000Z","updated_at":"2023-01-03T09:37:11.000Z","dependencies_parsed_at":null,"dependency_job_id":"768e72b7-59bb-486d-9611-7cad6b291295","html_url":"https://github.com/gwillem/magento-security-resources","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gwillem%2Fmagento-security-resources","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gwillem%2Fmagento-security-resources/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gwillem%2Fmagento-security-resources/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gwillem%2Fmagento-security-resources/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gwillem","download_url":"https://codeload.github.com/gwillem/magento-security-resources/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248154964,"owners_count":21056541,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T01:01:04.406Z","updated_at":"2025-04-10T03:42:29.852Z","avatar_url":"https://github.com/gwillem.png","language":"Python","funding_links":[],"categories":["Python","Security","Open Source Extensions"],"sub_categories":["Free","Other Magento 2 related Awesome Lists"],"readme":"# Magento Security Resources\n\nComprehensive list of resources to help you prevent, mitigate \u0026 resolve Magento security incidents. All listed vendors have experience with Magecart-related attacks.\n\n\u003e Are you a merchant dealing with an incident? If you have experienced staff, you can use the tools listed below to speed up the recovery process and prevent a repeat.\n\u003e If you don't have staff available or need an external report for compliancy, you can engage one of the consultancies below.\n\nOfficial Adobe resources are marked as such.\n\n# Mitigation tools\n\n## Free\n- [MageReport](https://www.magereport.com) - Remote vulnerability scanner\n- [Magento Malware Scanner](https://github.com/gwillem/magento-malware-scanner) - Server-side malware scanner\n- [Magento Security Scan](https://account.magento.com/scanner/) - Remote vulnerablity scanner [Adobe]\n\n## Commercial\n- [eComscan](https://sansec.io/ecomscan/) - Advanced Magento malware detection\n\n# Magento consultancy services\n\n## Incident Response\n- [3b Data Security](https://3bdatasecurity.com/) - Digital forensics, incident response \u0026 data breach management services\n- [Foregenix](https://www.foregenix.com/) - Cybersecurity, digital forensics, PCI compliance, PFI\n- [Sanguine Security](https://sansec.io) - Empowers Magento merchants to fix and prevent breaches\n- [Sucuri](https://sucuri.net/) - Complete website security, protection and monitoring\n\n## Security maintenance\n- [Mage One](https://www.mage-one.com) - Paid security support for Magento 1\n\n## Independent consultants\n- [Steve Perry](https://twitter.com/stevemarkperry) - United Kingdom\n- [Talesh Seeparsan](https://twitter.com/_Talesh) - Canada\n- [Willem de Groot](https://twitter.com/gwillem) - Netherlands\n\n# Magento security information\n\n## Reference\n- [Magento 2 Security Best Practices](https://docs.magento.com/m2/ee/user_guide/magento/magento-security-best-practices.html) - [Adobe]\n- [Magento 2 Security Checklist](https://github.com/talesh/magento-security-checklist) - A Magento community sourced security pre-flight checklist\n- [Magento Incident Response Plan Template](https://github.com/talesh/response)\n- [Magento Vulnerability Database](https://github.com/gwillem/magevulndb) - Central respository of vulnerabilities in 3rd party Magento components\n- [Magento 1/OpenMage - Security.txt generator](https://github.com/kkrieger85/magento-module-security-txt) Magento 1 Module which generates [security.txt](https://securitytxt.org/) file, configurable in Magento Backend \n\n## Blogs / Research\n- [Magento Security Blog](http://magento.com/security/) - [Adobe]\n- [Malwarebytes](https://blog.malwarebytes.com)\n- [RiskIQ](https://www.riskiq.com/blog/category/magecart/)\n- [Sanguine Labs](https://sansec.io/labs)\n\n# Contribute?\n\nMagento-specific contributions welcome! \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgwillem%2Fmagento-security-resources","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgwillem%2Fmagento-security-resources","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgwillem%2Fmagento-security-resources/lists"}