Skip to content

Scan rule · RSC-SEC-022

Backup or database dump public

SecuritySeverity: HighCWE-530

Probes typical dump/backup paths and confirms hits via SQL or archive signatures.

Scan tier

External scan (anonymous)

How to fix it

Remove the files from the web root and store backups outside the deployment.

Scan your own app for free

More rules in this dimension

RSC-SEC-001

No end-to-end HTTPS

RSC-SEC-002

HSTS header missing

RSC-SEC-003

No Content-Security-Policy

RSC-SEC-004

MIME sniffing not disabled

RSC-SEC-005

No clickjacking protection

RSC-SEC-006

CORS wildcard on the public document