Site Lens checks Joomla security advisories and risky settings

In plain terms, Site Lens compares a Joomla installation with public security and version data, then flags settings that may increase exposure.

This job comes up because Joomla sites combine core code, third-party extensions, update sources, user accounts and server settings. Joomla core already provides update management, user permissions, two-step verification and configuration controls, so administrators can inspect much of this manually. A template override is not the normal answer: this is an administrative audit rather than a presentation problem. The developer says Site Lens goes further by checking installed extension versions against the Vulnerable Extensions List, comparing Joomla with Joomla Security Centre advisories, identifying disabled or missing update sources, and reviewing 17 settings in one report. It also adds a scheduled task that emails when a new finding appears.

It is aimed at site owners, freelancers and maintenance teams responsible for several Joomla 5 or 6 sites, especially where routine security checks need a report for a client or ticket. A small, rarely changed site with an attentive administrator and no need for consolidated alerts may have little reason to install it.

According to the listing, Site Lens is free, GPLv2 or later, and developed by Med Amine. The directory shows no reviews, and the listing gives no broader track record for the developer. Before installing, check its matching rules and false-positive handling, required administrator permissions, scheduled-task setup, list-update behaviour and support arrangements. It does not scan for malware or alter the site, and a clean result is not a guarantee. The listing says it requires Joomla 5 or 6 and PHP 8.1 or newer.

Listed on the Joomla Extensions Directory.