Details on Application Security program and the scope of the Penetration testing

[lottiejane]

I am working with a client who has requested the information to provide assurance that the platform is stable and secure before opening the shop up to the public, is anyone able to support in providing further details on Shopify's security and the steps and frequency within Shopify's testing. 

[elianajohn]

Shopify is highly secure, utilizing PCI compliance, 256-bit SSL encryption, and regular security updates. The platform conducts frequent vulnerability assessments, penetration testing, and follows stringent security protocols to protect data. Shopify's infrastructure is designed for stability, ensuring uptime and resilience against cyber threats. You can share Shopify’s Security page with your client for detailed insights: Shopify Security. This should provide assurance of their platform’s reliability.

[lottiejane]

Thanks for the response, we've shared the detailed insights however they don't cover the specific steps taken in testing the set up or how frequently they are retested. Ideally we are looking for either more detail in the security and/or more detail in the testing against the security set up. 

Thanks!