Public store surface
Records the storefront URL and only the agreed public routes.
Security for your Shopify storefront.Scope first. Testing second.
A private pilot for a bounded security review of the public Shopify storefront and pre-agreed app or API surfaces. A specialist checks authorization and scope before work starts.
- 01 · Status
- Private pilot
- 02 · Surface
- Public storefront + agreed APIs
- 03 · Control
- Human scope review
WHAT WE RECORD
Clear authorization
Requires ownership or written authorization, exclusions, and allowed actions.
Human review
A specialist confirms scope and timing before any review can begin.
From request to verified fix.
- 01
Request the review
Send your storefront URL and the app or API surfaces you want reviewed.
- 02
Authorization & scope
We record ownership or written authorization, exclusions, and permitted actions.
- 03
Human review
A specialist confirms scope and timing; the bounded assessment follows.
- 04
Evidence, fixes, retest
You receive reviewed findings with evidence, practical fixes, and one scoped retest.
Know what your storefront exposes.
Never share admin, customer, or payment data. We only review what is agreed in writing.