Starship
starship / search / shogun-pagebuilder

Audit report

Shogun Page Builder

Broad accessReach : broad

by Shogun Labs · Page builder · Shopify App Store

Built for ShopifyPage builderv9.4.0
Risk level
Broad access
Executive summary

Shogun est un page builder positionné DTC mid-market. Risque Medium identique à PageFly, write_themes large + scripts tiers configurables.

Key insights

  • ◆Page builder + A/B testing + headless.
  • ◆Risque Medium, write_themes large + responsabilité partagée sur les scripts tiers.
  • ◆Built for Shopify. Éditeur US (San Francisco).
  • ◆Note 4,7 sur 3 120 avis.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Shogun est un page builder positionné DTC mid-market. Risque Medium identique à PageFly, write_themes large + scripts tiers configurables.

Key insights
  • ◆Page builder + A/B testing + headless.
  • ◆Risque Medium, write_themes large + responsabilité partagée sur les scripts tiers.
  • ◆Built for Shopify. Éditeur US (San Francisco).
  • ◆Note 4,7 sur 3 120 avis.
  • ◆SOC 2 Type II.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

write_themes
High

Publication pages.

read_themes
Medium

Templates.

read_products
Low

Blocs produits.

read_collections
Low

Blocs collections.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
getshogun.com
TLS grade
A+
HSTS
Enabled
CSP
Enabled

TLS 1.3, HSTS, CSP.

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Pass
ISO 27001 Fail
PCI DSS Fail

SOC 2 Type II + GDPR + CCPA. DPA publique.

Privacy policy
Track record

Publisher reputation

Publisher
Shogun Labs
Verified Shopify Partner
Yes
Years active
9
Other apps
1
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

LLM providers
OpenAI
Data shared with providers

Briefs marchand pour génération de contenu. Pas de PII client.

Retention policy

Standard API OpenAI.