Build more secure apps and protect merchant data – ask questions, share security practices, and give feedback on Shopify’s security tools. Keep credentials, merchant data, and sensitive vulnerability details out of public posts.
Run a security check on your app today, then tell us how it went.
With Shopify AI Toolkit installed, ask your coding agent:
/shopify Check my app for common security vulnerabilities
In a few minutes, you’ll see gaps that are easy to miss, like unverified sessions, unchecked webhook signatures, or overly broad scopes. Each finding shows where the issue is, why it matters, and how to fix it.
We made the tool open source so Shopify and app developers can improve it together. Share your feedback with us here, or contribute improvements directly through the open-source GitHub repository.
Your feedback helps make future checks more useful for everyone.