Securing Your Shopify Store

Is your store leaking customer data through an app you forgot you installed?

Register with your store's link and before the session you'll get a free review of your store: every app your storefront loads, and whether any has a known security problem, including the apps used in October's fake-checkout attack. You'll also get your store's growth plan.

In October, attackers planted code in four Shopify apps that sent shoppers who pressed Checkout to a fake page taking their card details (what happened). Shopify itself wasn't breached. The way in was apps that merchants had installed themselves, so this is a risk you can control. This session is for checking your own store before Black Friday.

This isn't a webinar. There's no slide deck and no lecture. You'll spend the session working on your own store with other merchants:

• Spot the fakeCan you tell a real checkout from a cloned one?
• Audit your appsGo through your installed apps with a partner and decide which to keep, question or remove.
• Walk a live checkoutCheck stores for redirects you didn't expect. We'll only check your store live if you say yes.
• Think like an attackerPlan how someone would get into a store like yours, then defend against another group's plan.
• Run a Black Friday drillA customer says your checkout looks wrong on the busiest day of the year. What do you do first?

You'll leave with a cleaned-up app list, a response plan, and a partner who checks in with you in two weeks. That's also when your store is reviewed again, so you can see what changed.

What to bring

Your laptop, logged into your Shopify admin.

Who it's for

Shopify store owners and operators of any size. No technical background needed. If you've ever installed an app from the Shopify App Store, this is for you.

Your hosts

Arthur founded Nostra and Joseph is its CTO. Nostra sits between a store and its shoppers and protects storefronts from bad actors, so this is their field. We won't pitch it during the session.