Support

How does ShieldScan work?

After installation, ShieldScan connects to your Shopify store using read-only OAuth permissions. It runs up to 10 security checks — scanning your theme code, app permissions, injected scripts, HTTP headers, GDPR webhooks, and more — then generates a security score and grade.

Does ShieldScan store my theme code or customer data?

No. Theme files are read in memory during a scan and immediately discarded. We never store theme code, customer names, emails, orders, or payment information. See our Privacy Policy for full details.

What permissions does ShieldScan request?

ShieldScan requests read-only scopes only: read_products, read_themes, read_orders, read_customers, read_locales, read_checkouts, and read_script_tags. We never request write access.

My scan shows a failing check — what do I do?

Each finding includes a "How to fix it" section with step-by-step remediation. For critical findings (malware, exposed API keys), follow the remediation immediately and contact Shopify Partner Support if needed.

How often should I scan my store?

We recommend scanning after every significant change: new app installations, theme updates, staff account changes, or new developer access. Pro and Business plans support scheduled automatic scans.

What is the difference between Free and Pro?

The Free plan runs a full scan but shows only the first 3 findings. Pro ($19/mo) unlocks all findings, detailed remediation, evidence, unlimited scans, and email alerts on critical issues. A 7-day free trial is included.

How do I cancel my subscription?

You can cancel at any time from your Shopify admin under Settings → Apps → ShieldScan → Cancel subscription. You will not be charged after cancellation.

The scan is taking a long time — is that normal?

A full scan typically takes 15–30 seconds. The deep virus scan and secrets scanner crawl up to 40 theme files which adds time. If a scan times out, try re-scanning — transient network issues to the Shopify API can occasionally cause delays.