Cases

Shopify app security case studies

Real engagements, written up: the app, the method, the findings that mattered and how they were fixed.

  • ยท 12 min read

    What a source code audit found in a live Shopify app

    We ran our own Code Scan process on Catalog Guard, a Shopify app built and operated by our founder that is live with merchants. Webhooks, session tokens and store isolation held up. The audit still found a password lockout behind the App Proxy, a missing frame-ancestors header and a handful of smaller gaps. All of them are now fixed.

    Read the case study