Security
Vitals is safe on your store.
Here’s exactly how we keep it that way.
One app, one team, every store checked.
Latest update · 26 Oct 2026
Shopify app attacks: we checked every store. All clear.
Attackers changed the settings of a few Shopify apps to send shoppers to fake checkout pages. We scanned every Vitals setting that reaches a storefront, in every store running Vitals. We found no malicious code. Nothing is needed on your side.
Anthropic · Cyber Verification Program
Approved for Anthropic’s Cyber Verification Program
Anthropic opens Claude’s full cyber-security capabilities only to teams it has verified. Vitals is one of them. Our engineers use these models to find and fix weak spots in our own code.
About the program ↗Every store scanned
We check every Vitals setting that reaches a storefront, and that every store loads only code we built.
One app, one script
Every app is another company with keys to your store. Vitals replaces 40+ of them. Fewer ways in.
Least access for our team
Support works in a limited role, with no access to our servers or your shoppers’ data.
Your shoppers’ payments
Card payments happen on Shopify’s own checkout. Vitals never sees or stores card details.
Check your store yourself
Takes 2 minutes.
- 1Open your store in a private browser window.
- 2Add any product to the cart and click Checkout.
- 3Look at the address bar: your own domain or a Shopify one (myshopify.com, shop.app).
- All good. See anything else? Contact the app on that page.
Questions about your store? Email our team →