76checks
Store security
Encryption, security headers, email authentication, third-party scripts and apps, skimming signals, brand look-alikes, legal pages, and performance.
Kernel InitProductsPosture
The outside-in security rating for online stores.
For Shopify and DTC stores. Posture finds what attackers, bots, and AI agents can see from the outside, scores it from 0 to 100, compares it with similar stores, and tells you what to fix first. No app install, and no access to your store.
Store Trust Score
yourstore.example
72/100
Higher is better
Agent exposure (lower is better)39/100
Top findings
- HighDMARC policy is
p=noneEmail - MedNo Content-Security-Policy headerHeaders
- LowAI crawlers have no rules in robots.txtAgents
Every finding: observed · expected · fix
How it works
Three steps. No access needed.
- 01
Enter a domain
Just the store's public address. No login, no app, no API keys.
- 02
We scan passively
Normal page requests, public DNS and TLS, the way any visitor or bot would see the store.
- 03
Score, evidence, fixes
A 0–100 score, what we observed versus what we expected, and the fixes in priority order.
Why now
Your next visitor may not be human.
AI agents now browse, compare, and buy on people's behalf, and attackers automate everything else. Most security ratings stop at encryption and email. Posture adds a layer that measures how exposed a store is to agents and bots.
- 01AI crawlers read your catalog and policies.
- 02Shopping agents check out on someone's behalf.
- 03Bots test stolen cards and scrape prices.
- 04Prompt injection targets your own AI features.
One engine, three lenses
Everything that's visible from outside.
The three modules combine into one Store Trust Score from 0 to 100.
36controls · 9 categories
AI agents & bots
How exposed the store is to AI agents and bots: scraping, prompt injection, card testing, and AI crawlers.
53passive risk checks
Business risk
Skimming, spoofing, takeover, vulnerable apps, visible fraud, accounts, legal, availability, and AI.
Benchmark
Compared with the market, not a guess.
8.5M+
Shopify and WooCommerce stores in our market base. Only aggregates are used.
1,676
Stores scanned passively in a stratified sample. Every percentile shows its sample size.
0–100
An explainable Trust Score, with evidence and a fix for every finding.
Pricing
Start free. Stay covered.
Prices in USD. Checkout isn't live yet.
Snapshot
$0
See where you stand.
- One domain, passive scan
- 0–100 score and grade
- Top findings with evidence
- Shareable result link
Audit
$490one-time
A complete snapshot with an action plan.
- Full passive scan
- Executive report, PDF and HTML
- Apps, pixels and scripts review
- 45-minute prioritization session
- Re-scan after 30 days
Watch
$99/mo
Continuous monitoring for one store.
- Automatic weekly scan
- Alerts: certificate, DMARC, new scripts
- History and trends
- Monthly PDF report
Guard
$299/mo
For stores with serious revenue.
- Everything in Watch, scanned daily
- Checkout script and pixel watch
- Lookalike domain watch
- Guided DMARC to reject
- Priority support
Agency and portfolio plans are available on request. Contact us.
Start with a free snapshot.
One domain, a passive scan, a 0–100 score and your top findings with evidence.