CMS Security
Shopify Storefront API Exposure Check
The Shopify Storefront API can expose sensitive data if not properly protected. Check its accessibility and secure its endpoints to protect your data.
What this test checks
This test checks whether the Shopify Storefront API is publicly accessible. This API allows interaction with your store data (products, collections, cart) and can expose sensitive information if not correctly protected. Insecure exposure can allow attackers to retrieve product data, manipulate the cart, or exploit vulnerabilities.
Our recommendation
Protect the Storefront API using access tokens and permissions. Limit access to authenticated requests and verify permissions for each endpoint. Use Shopify apps to manage access and monitor logs for suspicious activity.
Security tests
Read more
CMS Security