Shopify has launched a new app security check command in its Shopify CLI as part of its Fall '26 Edition update.

Part of Shopify's AI Toolkit, the command is designed to help developers identify security issues in their own code. It checks for common vulnerability patterns, including unauthenticated routes, cross-shop data access and unverified webhooks.

Developers can use the tool alongside an AI coding assistant to work through potential fixes. The command is intended to complement existing security tools and reviews, not replace them.

The release comes as the eCommerce group broadens a set of product changes aimed at merchants, developers and shoppers. Several of the updates focus on AI-based shopping, payments and in-store retail operations.

Ben Homer, Solutions Engineering Lead at Shopify, said businesses are operating in a more demanding commerce environment.

"Commerce is changing rapidly. It's advancing, but not necessarily in a straight line," Homer said.

He added that businesses now face a wider range of operational pressures across sales channels, customer expectations and international trading.

"To succeed in this moment and in the future, businesses need to sell across more surfaces, respond to higher customer expectations, navigate ever-changing AI solutions, run a global operation, and maintain margins across cost of goods sold, labor, pricing, and overhead," Homer said.

Beyond developer tooling, Shopify used the latest edition of its product showcase to outline a broader push into AI-assisted commerce. Among the additions are expanded connectors that let merchants link Shopify with several AI agents used for tasks such as managing products, inventory, orders and performance.

Source link