Shopify
Cloudflare Workers
Klaviyo
Slack
Google Analytics 4
Microsoft ClarityAPI
Scoped keys
tests:read, tests:write, tests:start and messages:write.
For teams of 50 and more
Testing that fits your stack and your controls
Scoped API keys, signed webhooks, headless and edge installs, and data kept apart per brand by the database itself.
API keys
Settings- Agent draftstests:readtests:write
- Release pipelinetests:readtests:start
- Email sendermessages:write
What gets in the way
What large teams need from a testing tool
Access control
Security teams ask who can change what, and how sign-in works.
Integration
Tests have to start, stop and report inside existing pipelines.
Custom storefronts
Not every page is a Shopify theme.
How Growth Dept CRO helps
Controls a security review can check
Sign-in and roles
Google sign-in, or email and password with optional two-step codes, and four roles per organization.
Scoped keys and signed webhooks
API keys carry only the scopes you give them; webhook deliveries are signed with HMAC-SHA256.
Data kept apart
Row-level security limits every request to one brand, and no table stores shoppers' names, emails or addresses.
What you get
Built to sit inside a bigger system
Webhooks
Signed deliveries
Retried on failure, kept for 30 days.
Headless
Decided on the server
Middleware and Worker installs for custom storefronts.
Find out what is worth testing on your store.
Book a 45-minute call with the Growth Dept team. We look at your store and your traffic, and tell you which tests to run first.