Shopify security retest
Shopify Security Retest & Evidence Pack
$800One retest roundUp to 10 findings
Your fixes are deployed. We check the agreed findings and document the results clearly.
Illustrative sample · retest addendum
- ResolvedF-01 Cross-store order lookup
- ResolvedF-02 Webhook HMAC not enforced
- UnresolvedF-03 Session token reuse
- InconclusiveF-04 Proxy signature on legacy route
01Process
What we review
We use the original findings, reproduction steps and your remediation details to retest up to 10 agreed issues in one app. Each result is recorded as resolved, unresolved or inconclusive, with relevant evidence and testing limitations.
02Deliverables
What you receive
A signed retest addendum and concise evidence summary you can use in your correspondence with Shopify. If another provider performed the original test, our addendum covers only the findings we independently retested. Share the original report securely after we agree on the engagement.
When the original test was performed by another provider, we assess separately whether the retest conditions are comparable. If the original report or access is insufficient, the scope is agreed separately.
03Limits
What’s excluded
This service does not replace an initial VAPT or include a fresh assessment of the entire application. One retest is already included in our Incident VAPT package, so you don’t pay for it twice. See all Shopify app security pricing.
Not sure the issues were ever fully assessed?
A readiness review gives you a bounded, documented baseline before your next review.