Starship
starship / search / shopify-power-tools-suite

Audit report

Power Tools Suite

Broad accessReach : broad

by Power Tools · Store design · Shopify App Store

Store design
Risk level
Broad access
Executive summary

Boost your store with all the Power Tools Apps in one!

Key insights

  • ◆Long-established Shopify app, launched May 2013, actively maintained (last update June 2025).
  • ◆High customer rating (4.9/5 from 90 reviews), reputation for reliability and support.
  • ◆Publisher based in Subiaco, Western Australia; primary website served via Webflow + Cloudflare/CloudFront.
  • ◆No known security breaches, CVEs, or public incidents tied to Power Tools or powertoolsapp.com.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Boost your store with all the Power Tools Apps in one!

Key insights
  • ◆Long-established Shopify app, launched May 2013, actively maintained (last update June 2025).
  • ◆High customer rating (4.9/5 from 90 reviews), reputation for reliability and support.
  • ◆Publisher based in Subiaco, Western Australia; primary website served via Webflow + Cloudflare/CloudFront.
  • ◆No known security breaches, CVEs, or public incidents tied to Power Tools or powertoolsapp.com.
  • ◆App is a storefront-facing utility bundle (filtering, hide sold-out, trending sort, pricing policy), limited admin scope expected, not handling payment data directly.
  • ◆Privacy policy is Australian-jurisdiction-only with no enumerated sub-processors, retention windows, or formal compliance certifications.
  • ◆No mention of AI/LLM usage in privacy policy or app description.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Low

Required to display, filter, and sort products on storefront.

write_products
Medium

Likely needed for bulk editing and pricing policy features; broad write access to catalog.

read_themes
Medium

Theme integration required for storefront customizations (filters, sort orders).

write_themes
High

Theme write access enables script injection and storefront modifications; high risk if compromised.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
powertoolsapp.com
TLS grade
unknown
HSTS
Enabled
CSP
Missing

HSTS enabled (max-age=31536000). Served via Webflow on Cloudflare with CloudFront caching. No CSP header observed on root response.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy aligned to Australian Privacy Act 1988 / APPs. No formal certifications disclosed. Global data transfers acknowledged but sub-processors not named.

Privacy policy
Track record

Publisher reputation

Publisher
Power Tools
Verified Shopify Partner
No
Years active
13
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.