Starship
starship / search / odfl-ltl-freight-quotes

Audit report

ODFL LTL Freight Quotes

TrustedReach : moderate

by Eniture Technology · Orders and shipping · Shopify App Store

Orders and shipping
Risk level
Trusted
Executive summary

Get accurate LTL freight quotes at checkout

Key insights

  • ◆Eniture Technology is a long-standing shipping/logistics app publisher with multiple shipping carrier integration apps on Shopify
  • ◆App integrates with Old Dominion Freight Line (ODFL) to fetch real-time LTL freight quotes at checkout
  • ◆Publisher website (eniture.com) is hosted on Apache/Amazon Linux with HSTS enabled and clean TLS
  • ◆No public security incidents, breaches, or CVEs found for Eniture Technology

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Get accurate LTL freight quotes at checkout

Key insights
  • ◆Eniture Technology is a long-standing shipping/logistics app publisher with multiple shipping carrier integration apps on Shopify
  • ◆App integrates with Old Dominion Freight Line (ODFL) to fetch real-time LTL freight quotes at checkout
  • ◆Publisher website (eniture.com) is hosted on Apache/Amazon Linux with HSTS enabled and clean TLS
  • ◆No public security incidents, breaches, or CVEs found for Eniture Technology
  • ◆Privacy policy URL is published and accessible at eniture.com

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_shipping
Low

Inferred - shipping rate carrier service apps typically require read access to shipping configuration to provide quote calculation

write_shipping
Medium

Inferred - app registers a CarrierService API endpoint with Shopify to return rate quotes at checkout

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
eniture.com
TLS grade
A
HSTS
Enabled
CSP
Missing

HSTS max-age=31536000 with includeSubDomains; X-Frame-Options SAMEORIGIN; X-Content-Type-Options nosniff; Permissions-Policy restrictive; no Content-Security-Policy header observed

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy is published but full content was not extractable in automated review; certifications could not be confirmed

Privacy policy
Track record

Publisher reputation

Publisher
Eniture Technology
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.