Check before you install
Shopify app
security audit.
What can this app read, change, or leave behind? Get a clearer view of its permissions, developer and merchant reviews before you give it access.
Already checked
Recently audited apps
Open a published report, or check another app above.
Loading published reports…
How the audit works
From app listing to a useful checklist.
Paste the public link
Use an apps.shopify.com listing, its reviews page, or the app handle. Your store credentials are never needed.
Read the evidence
Neo reads the listing and applies the same scoring rules across apps. Existing audits open quickly; a new one usually takes about a minute.
Match access to the job
Use the findings to decide which permissions make sense for your store and what to ask the developer before installing.
A public-listing risk review, not a code inspection or penetration test. A score does not certify an app as safe or establish that it has a vulnerability.
Before you add an app
Shopify app security, explained.
What does the security audit check?
It reviews declared data access, read and write permissions, developer information, ratings and selected critical reviews. Each report separates findings to weigh, points worth knowing and positive signals.
Does a higher score mean an app is safe?
A higher score indicates lower risk under this public-listing model. It does not inspect source code, test the app in your store, or verify how the developer actually handles data. Read the findings alongside the score.
Do I need to connect my Shopify store?
No. Paste the public app listing. This tool does not connect to your store, read your customer records or change your installed apps.
Is this a Shopify certification?
No. This is an independent Kairo assessment. Built for Shopify is a separate program with its own quality requirements. Read about Built for Shopify.
How fresh are the results?
Each report shows when its listing was read. Published reports are shared and may use an earlier listing snapshot. Findings reflect the current scoring rules; a new request does not necessarily re-fetch an already published listing.
Build a leaner, more accountable app stack.
Kairo connects growth, technology and operations around the business you want to build.
Let's grow your brand