PrestaShop security module Your shop sells.
Sentinel
stands guard.

Secure your team’s access. Find vulnerable modules. With Pro, block attacks and check your files. All from your back office.

Free, no subscription. Full 2FA included.

Your security workspace
PrestaShop / Sentinel
Sentinel security dashboard in PrestaShop
The real Sentinel interface. Click to explore.Enlarge
One module. Four lines of defence.
01Secure access 02Block attacks PRO 03Find vulnerabilities 04Check files PRO
An online merchant preparing parcels while monitoring their shop’s security on a laptop

Your shop is worth protecting

You handle the orders.
Keep an eye on the risks.

A stolen password. A vulnerable module. A modified payment file. Sentinel brings the tools together to help you prevent incidents, detect them and understand what happened.

  • Sales and marginDays without orders, abandoned carts, emergency fixes.
  • Customers and dataA data leak means informing customers and answering to regulators.
  • Reputation and search rankingMalicious redirects and browser warnings drive away traffic and trust.
Explore the features

Inside Sentinel

Choose a protection ↓

Protect your team’s accounts.

PrestaShop / Sentinel
Track your team’s two-factor authentication
Track your team’s two-factor authenticationEnlarge

Passkeys, security keys or an authenticator app: add a second verification step and track each employee’s enrolment.

Explore this protection

Part of your store

Built for everyday
e-commerce.

Technical details →
PrestaShop
1.7.7 – 9.2
PHP
7.2 – 8.5
Publisher
BCISoft, France
Latest version
v2.7.6

32 versions released since November 2025 · See what’s new

Installed from your back office

Upload the module like any other. Security logs fill up as soon as it is enabled, with nothing to configure.

Customer data stays with you

The scanner sends PrestaShop, PHP and module versions, without customer data. Logs stay on your server.

Fits your installation

Multistore, Cloudflare, reverse proxies and CDNs. No additional PHP extension or server package required.

What teams report

After an incident, they knew what had happened.

Stores that relied on Sentinel to understand an attack, instead of restarting in the dark.

Sentinel did more than “log”: it gave us the material to understand and prove how the incident unfolded.

Read the full account

After unusual signals on V&C, we needed to understand what had actually happened, not only to notice symptoms. Without a fine view of application traffic we would have been in the dark: web logs alone would not have let us reconstruct the chain of events.

Sentinel was decisive: it recorded and kept what we were missing most — especially the content of POST requests — which let us trace the incident over time, identify the sequence of actions and distinguish reconnaissance, failed attempts and the critical step. That traceability made the analysis credible and actionable: we knew what to treat first in remediation, instead of working blind.

In short, Sentinel did more than “log”: it gave us the material to understand and prove how the incident unfolded, which made all the difference in a serious security situation.

V&COnline retail · France

We have a clear view of the incident and a next step — not only a restart in the dark.

Read the full account

Our store went to a blank page, storefront and back office: a very tense situation.

The investigation gave us the essential: a two-stage timeline (a quiet presence, then brutal exploitation), which stopped us treating it as a simple outage. Despite gaps in the logs, crossing them with dated backups made it possible to choose a relevant restore. A check after going back online confirmed the site had returned to a healthy state, with concrete actions to close the gaps.

We have a clear view of the incident and a next step — not only a restart in the dark.

Ecommerce storeAnonymised account · France

Thank you for all your help. It is thanks to your logs that I was able to find where the hack came from. Thank you again for being available.

F. Garcia

Free to get started. Pro to go further.

Choose your protection.

Compare the plans

Sentinel Free

No subscription

Free

Secure your access. Find known vulnerabilities.

  • Full two-factor authentication
  • Back-office IP access control
  • One vulnerability scan per 24 hours
  • Security logs and dashboard

Vulnerabilities published more than 30 days ago.

Download Free

Sentinel Pro

Active protection

29,90 € excl. VAT / month

Everything in Free, plus attack blocking.

  • Web application firewall (WAF)
  • Application anti-DDoS
  • Back-office brute-force protection
  • File integrity checks
  • Line-by-line file comparison
  • Unlimited scans, including recent vulnerabilities
  • Scheduled daily checks
  • Email reports and notifications

Per installation, no commitment. Six manual integrity checks per 24 hours.

Get Sentinel Pro

Also on PrestaShop Addons: 3 months of Pro included with the module, to activate after installation. See the Addons listing

Before you install

A few useful
answers.

All questions
What does the free edition protect?

Full back-office two-factor authentication, back-office IP access control, security logs, the dashboard and the vulnerability scanner. Free has no time limit and needs no credit card. The free scanner allows one scan per 24 hours, covering vulnerabilities published more than 30 days ago.

What does Pro add?

Attack blocking with a web application firewall (WAF), application anti-DDoS, brute-force protection, file integrity checks, unlimited vulnerability scans including recent issues, and scheduled daily checks with email reports.

How much is Pro and how do I turn it on?

€29.90 excluding VAT per month and per installation, with no commitment and cancellable at any time. Pro is turned on from inside the module, with nothing to reinstall. If you stop, the store goes back to Free and keeps two-factor authentication, IP access control, the scanner and the logs.

How do I install Sentinel?

As long as it takes to upload a ZIP file: in the back office, Modules > Module Manager > Upload a module. Nothing needs configuring to get started: security logs fill up as soon as the module is enabled.

Read the installation guide ↗
Is Sentinel compatible with my store?

Sentinel supports PrestaShop 1.7.7 to 9.2 and PHP 7.2 to 8.5, multistore included. It works behind Cloudflare, a reverse proxy or a CDN, with no additional PHP extension or server package.

Could I lock myself out of my back office?

Safeguards are in place. An empty allowlist blocks nobody, and the command line is never blocked. Two-factor authentication suspends itself if no method can be enrolled, and commands let you take back control from the server.

Does Sentinel slow the store down?

Sentinel’s remote services stay off the critical path: short timeouts, a circuit breaker and a cache. If they are slow or unreachable, the store and the back office keep working. With extended coverage (Pro), the anti-DDoS decision takes about 0.2 ms.

What data leaves my store?

The scanner sends your PrestaShop, PHP and installed module versions. No customer data. Logs stay on your server, with passwords and tokens masked.

Does Sentinel replace updates and backups?

No. Updates, backups and hosting security remain necessary. Sentinel complements them with access protection, monitoring and, with Pro, blocking of detected attacks.

Start by securing your access

Install Sentinel.
2FA is already included.

Download for free

No subscription for the Free edition · PrestaShop 1.7.7 – 9.2

How to install