Starship
starship / search / age-verifier

Audit report

Age Verifier

TrustedReach : broad

by Metizsoft Solutions Pvt Ltd · Trust and security · Shopify App Store

Trust and security
Risk level
Trusted
Executive summary

Age Verifier App to restrict under-age visitors

Key insights

  • ◆Simple popup utility, scopes appear minimal: products, discounts, online store, price rules
  • ◆Publisher claims ISO 27001:2022, SOC 2-aligned, GDPR/CCPA/DPDP compliance
  • ◆TLS clean on publisher domain with HSTS enabled (no CSP header present)
  • ◆No public CVEs, breaches, or security incidents found for Metizsoft or the Age Verifier app

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Age Verifier App to restrict under-age visitors

Key insights
  • ◆Simple popup utility, scopes appear minimal: products, discounts, online store, price rules
  • ◆Publisher claims ISO 27001:2022, SOC 2-aligned, GDPR/CCPA/DPDP compliance
  • ◆TLS clean on publisher domain with HSTS enabled (no CSP header present)
  • ◆No public CVEs, breaches, or security incidents found for Metizsoft or the Age Verifier app
  • ◆Low review volume (9 reviews) and no Built for Shopify badge

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Low

Reading product catalog to scope age-gating rules

write_themes
Medium

Required to inject age verification popup into storefront theme

read_discounts
Low

Read access to discount configuration

read_price_rules
Low

Read access to pricing rules

read_online_store
Low

Inspecting online store configuration

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
metizsoft.com
TLS grade
A
HSTS
Enabled
CSP
Missing

HSTS enabled (max-age 1y, includeSubDomains); no Content-Security-Policy header; X-Frame-Options SAMEORIGIN and X-Content-Type-Options nosniff present

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Fail
ISO 27001 Pass
PCI DSS Fail

Publisher claims SOC 2-aligned (not certified), ISO 27001:2022, GDPR/CCPA, and India DPDP Act compliance. Data retention: 24 months sales, contract+7y customers.

Privacy policy
Track record

Publisher reputation

Publisher
Metizsoft Solutions Pvt Ltd
Verified Shopify Partner
No
Years active
9
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.