Register
Prelumen Analytics

TYPO3 isn’t WordPress. Its security check shouldn’t be either.

Core version, extension exposure, and configuration checks specific to TYPO3 — with guidance your integrator can execute.

Is this your website?
  • Match your TYPO3 core version against published CVEs
  • See which extensions are visible from outside and what versions they run
  • Find out whether the backend and install files are reachable

Scan a TYPO3 site

Enter a URL and get core, extension and configuration findings with the CVEs and fixing versions.

Core version detection

Determines the TYPO3 version from several angles — the backend entry point, asset paths and configuration files — rather than trusting a single signal.

CVE matching

Looks up the detected versions in the National Vulnerability Database and lists the CVEs that apply, each with the version that closes it.

Extension exposure

Reads the extension metadata that a TYPO3 installation exposes publicly and checks those versions too.

Backend and install files

Checks whether the TYPO3 backend answers from the public internet and whether installation files were left in place.

Is TYPO3 backend access required?
No. The check only uses what the installation exposes publicly. You do not need to log in or hand over credentials.
Where does the vulnerability data come from?
The National Vulnerability Database. Each finding names the CVE and the version that resolves it, so your integrator can act on it directly.
Are all extensions found?
Only those that leave a public trace — assets, metadata files or markup. Backend-only extensions are not visible from outside.
Why not use the WordPress check?
The two systems expose completely different paths, files and version markers. A WordPress scan would find nothing on a TYPO3 site.

Every check runs on our servers: you provide a public URL, there is nothing to install, and pages are rendered with JavaScript first so single-page apps are read the same way a browser reads them. Each result gets a permanent link you can share. On a website you have claimed, findings become tracked issues, and result pages offer AI summaries and developer guidance on plans that include them.