Audit et amélioration de la sécurité

Grow

Included:

• Execution of a basic security audit for one Shopify store or custom frontend, reviewing common risks such as XSS, CSRF, and authentication loopholes.
• Verification of SSL/TLS encryption and password policy enforcement for up to 5 staff accounts.
• Setup of basic access control adjustments and session timeout settings.
• Delivery of a concise recommendation report outlining 5–7 prioritized enhancements for future improvements.
• Email and CRM-based support with standard priority (responses within 3–4 business days).

Not Included / Limitations:

• No penetration testing, vulnerability scanning tools, or continuous monitoring setup.
• Limited to one storefront and 5 staff accounts—additional scope requires a separate engagement.
• No compliance certification submission or managed security services.
• Services are delivered exclusively online—no on-site or in-office audits.

Advanced

Included:

• Comprehensive security assessment for up to 2 Shopify Plus storefronts or connected custom apps.
• Evaluation of API abuse risks, session hijacking vulnerabilities, and data exposure points.
• Implementation of intermediate security enhancements including stricter access controls, secure cookie handling, and admin permission reviews.
• Configuration of basic encryption upgrades and recommendation of third-party monitoring tools.
• Advisory on compliance alignment with GDPR and PCI-DSS for up to 2 regions.
• Email and CRM-based support with priority response (within 1–2 business days).

Not Included / Limitations:

• No advanced penetration testing or integration with full SIEM/SOC systems.
• Limited to two storefronts, two regions, and intermediate configurations—expanded coverage requires a new engagement.
• No direct liaison with regulators or legal bodies for compliance certifications.
• Remote delivery only—no on-site security implementation.

Plus

Included:

• Enterprise-grade security audit and enhancement for up to 4 Shopify Plus storefronts, custom frontends, or private/public apps.
• In-depth evaluation of data exposure risks, API and webhook abuse, authentication weaknesses, and cross-site vulnerabilities.
• Deployment of advanced encryption strategies, granular access controls, and multi-factor authentication for up to 30 staff accounts.
• Configuration of real-time threat alerts with recommendations for continuous monitoring solutions.
• Advisory on compliance standards: GDPR, PCI-DSS, and Shopify App Security guidelines across up to 5 regions.
• Follow-up consultation within 90 days to evaluate security posture and refine strategies.
• Email and CRM-based support with high priority (responses within 24 hours).

Not Included / Limitations:

• No execution of penetration testing reports or formal compliance certification submissions—external auditors are required for those tasks.
• No coverage beyond four storefronts, 30 accounts, or five regions—additional needs require a new engagement.
• No on-site or in-office audits—services are performed exclusively online.