Starship
starship / search / rabbitseo

Audit report

Rabbit SEO

Broad accessReach : moderate

by RabbitSEO · Marketing · Shopify App Store

Marketing
Risk level
Broad access
Executive summary

Get your app more discoverable on search engines

Key insights

  • ◆RabbitSEO is an Israel-based (Tel Aviv) SEO optimization app for Shopify, launched January 2018, with 4.5/5 rating (27 reviews).
  • ◆App advertises AI generation features for metadata/content, implying LLM use, but provider and data handling are not disclosed on the listing.
  • ◆No public security incidents, breaches, or CVEs are associated with RabbitSEO; web search noise comes from unrelated Rabbit R1 device and RabbitMQ.
  • ◆Publisher web infrastructure (AWS ALB) is functional but lacks defense-in-depth headers (HSTS, CSP).

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Get your app more discoverable on search engines

Key insights
  • ◆RabbitSEO is an Israel-based (Tel Aviv) SEO optimization app for Shopify, launched January 2018, with 4.5/5 rating (27 reviews).
  • ◆App advertises AI generation features for metadata/content, implying LLM use, but provider and data handling are not disclosed on the listing.
  • ◆No public security incidents, breaches, or CVEs are associated with RabbitSEO; web search noise comes from unrelated Rabbit R1 device and RabbitMQ.
  • ◆Publisher web infrastructure (AWS ALB) is functional but lacks defense-in-depth headers (HSTS, CSP).
  • ◆Privacy policy and compliance certifications (GDPR/SOC2/ISO27001) could not be independently verified from public-facing URLs.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Medium

Standard for SEO apps to read product titles, descriptions, and metadata for optimization scoring.

write_products
High

SEO apps with metadata/AI-generation features typically need to write back optimized titles/descriptions/alt-text; write scope on product catalog is sensitive if abused.

read_themes
Medium

Likely required for page-speed and on-page SEO analysis.

read_content
Low

Read blog/page content for SEO scoring.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
rabbitseo.com
TLS grade
unknown
HSTS
Missing
CSP
Missing

HTTP/2 200 from AWS ALB; no Strict-Transport-Security and no Content-Security-Policy headers observed in response.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy could not be retrieved from standard URLs on www.rabbitseo.com; no public compliance certifications surfaced via listing or web search.

Privacy policy
Track record

Publisher reputation

Publisher
RabbitSEO
Verified Shopify Partner
No
Years active
8
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

LLM providers
Data shared with providers

Product metadata and content likely sent to an undisclosed LLM provider for AI generation of titles, descriptions, and SEO copy.

Retention policy

unknown