Meet Arthur Root, co-host of Securing Your Shopify Store

Securing Your Shopify Store is hosted by Arthur Root and Joseph Higgins. This post is about Arthur: who he is, and why his background fits a session on checking your own store before Black Friday.

Who Arthur is

Arthur Root is a partner at Remi, a VC-backed DTC brand doing eight figures a year. He also founded Nostra, which protects online stores from bad actors. Nostra sits between a store and its shoppers and protects storefronts, so the problems this workshop covers are the ones his company works on.

His co-host, Joseph Higgins, is Nostra's CTO. Joseph was previously Chief Architect at Vox Media and VP of Engineering at Group Nine.

Why it matters for this session

In October, attackers planted code in four Shopify apps. Shoppers who pressed Checkout were sent to a fake page that took their card details. Shopify itself wasn't breached. The way in was apps that merchants had installed themselves, which means store owners can do something about it.

Arthur works on this kind of threat at Nostra, and he is also connected to a DTC brand through Remi. That gives you a host who sees the problem from the side of the company that protects stores and from the side of a brand that sells online.

The hosts have said they won't pitch Nostra during the session. The hour is for working on your own store.

What you'll do with the hosts

This is a working session, not a webinar. There is no slide deck and no lecture. You'll work with other merchants on exercises like these:

• Spot the difference between a real checkout and a cloned one.
• Go through your installed apps with a partner and decide which to keep, question or remove.
• Think like an attacker, then defend against another group's plan.
• Run a Black Friday drill: a customer says your checkout looks wrong on the busiest day of the year, and you decide what to do first.

Before the session, if you register with your store's link, you'll get a free review of every app your storefront loads. It checks whether any has a known security problem, including the apps used in October's fake-checkout attack. You'll also get your store's growth plan.

You'll leave with a cleaned-up app list, a response plan, and a partner who checks in with you in two weeks. Your store is reviewed again at that point, so you can see what changed.

Details

Friday, November 13, 3:00 PM to 4:00 PM EST, online. Bring your laptop, logged into your Shopify admin.

The session is for Shopify store owners and operators of any size. You don't need a technical background. If you've ever installed an app from the Shopify App Store, it's for you.