Starship
starship / search / cart-conversion-boost

Audit report

Cart Conversion Boost

TrustedReach : broad

by APPSYL.COM - Apps You Love · Store design · Shopify App Store

Store design
Risk level
Trusted
Executive summary

Hide PayPal, Apple Pay and Amazon Pay payment buttons!

Key insights

  • ◆Cart Conversion Boost is a narrow-scope cart UX app that hides external payment buttons (PayPal, Apple Pay, Amazon Pay) until checkout details are filled.
  • ◆Publisher APPSYL.COM is based in Brooklyn, NY and runs a WordPress-based site behind Cloudflare/BunnyCDN.
  • ◆No declared OAuth scopes are visible on the public listing; the app is primarily theme/storefront-modifying with minimal data-handling footprint.
  • ◆Privacy policy is published over HTTP and the canonical URL is broken (404 on the redirected host), reducing transparency.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Hide PayPal, Apple Pay and Amazon Pay payment buttons!

Key insights
  • ◆Cart Conversion Boost is a narrow-scope cart UX app that hides external payment buttons (PayPal, Apple Pay, Amazon Pay) until checkout details are filled.
  • ◆Publisher APPSYL.COM is based in Brooklyn, NY and runs a WordPress-based site behind Cloudflare/BunnyCDN.
  • ◆No declared OAuth scopes are visible on the public listing; the app is primarily theme/storefront-modifying with minimal data-handling footprint.
  • ◆Privacy policy is published over HTTP and the canonical URL is broken (404 on the redirected host), reducing transparency.
  • ◆No public security incident, breach, or CVE was found for APPSYL.COM or this app.
  • ◆Categorized under Marketing and conversion > Cart customization; listed since April 2018.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_themes
Low

L'app doit lire le thème pour modifier l'affichage du parcours de paiement, ce qui est induit de la fonction déclarée de l'app.

write_themes
Medium

Le masquage des options de paiement suppose de modifier les fichiers du thème, ce qui est induit de la fonction déclarée de l'app.

write_script_tags
Medium

La dissimulation dynamique d'éléments pendant le checkout requiert l'injection de scripts, ce qui est induit de la fonction déclarée de l'app.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
appsyl.com
TLS grade
unknown
HSTS
Missing
CSP
Missing

appsyl.com is fronted by Cloudflare and redirects to vip.appsyl.com (BunnyCDN). No HSTS or CSP headers observed in the initial response.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy URL is declared but the page could not be retrieved (HTTP scheme, redirects to a 404). No compliance certifications could be verified from public sources.

Privacy policy
Track record

Publisher reputation

Publisher
APPSYL.COM - Apps You Love
Verified Shopify Partner
No
Years active
8
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.