The 20-Minute Shopify App Audit That Saved Me $600/Year
I built a stupid-simple decision matrix. In 20 minutes, it found $50/month in waste. Here's the exact template — copy it, run your own app list through it, and
Ever looked at a competitor’s store and wondered what apps they’re running? Or inherited a store and found yourself paying for apps you never installed? You can’t see a store’s app list from the outside — the admin is private. But most apps load scripts on the storefront, and those scripts are visible to anyone.
This guide shows three free ways to see what apps a Shopify store is using, what each method can and can’t detect, and how to check your own store when you’re the one who needs the audit.
Full disclosure: Seller Tales is published by JoyCraft. When our own tools are relevant, we say so in the article.
Full disclosure: Seller Tales is published by JoyCraft — when we recommend our own tools below, we say so.
We built a free tool for exactly this: paste a store URL or its page source into the Storefront Audit tool and it lists the known apps it detects — Klaviyo, Yotpo, Bold, and many other app scripts.
It runs entirely in your browser. Nothing leaves your machine, no login, no signup.
What it sees: apps that load recognizable client-side scripts on the storefront. That covers most popular Shopify apps (email, reviews, popups, loyalty, bundles, payment providers).
What it doesn’t see: apps with no storefront script — back-office apps (inventory, bookkeeping), or apps that only touch the checkout API or admin. We’re honest about that limit.
If you want to do it by hand, open any store, right-click → View Page Source, and search (Ctrl+F) for these strings:
cdn.shopify.com/extensions/ — this is where Shopify serves app scripts from. Every app script URL under this path includes the app name, e.g. klaviyo, yotpo, judge-me.cdn.shopify.com/s/files/ — theme and app assets.static.klaviyo.com, d1pnpjddp5v5qh.cloudfront.net (Yotpo), cdn.judge.me — search the app name and you’ll find its script host.A quick copy-paste workflow: View Page Source → select all → copy → paste into our Storefront Audit tool, which does the matching for you and groups platform scripts separately from third-party apps.
Open DevTools (F12) → Network tab → reload the store → filter by script. The request list shows every script the store loads, including app scripts. This catches scripts that only load after user interaction (scroll, click) — but you have to know which domain belongs to which app.
There are paid services that claim full app detection. Before paying, know the honest limit that applies to every method: apps that don’t load a client-side script are invisible from the outside. A paid tool can’t see what doesn’t load either. The free methods above cover the same ground for storefront-visible apps.
Seeing what apps a store runs from the outside is a starting point. The real audit — the one that saves money — happens from the inside:
The free tool tells you what loads on the storefront. For the full picture — your actual app list, API connection, and webhook health with read-only access — that’s what CostPilot Pro does (our tool, disclosed, 7-day free trial). The free methods in this guide work without it.
| Method | Time | Detects | Blind spots |
|---|---|---|---|
| Free Storefront Audit tool | 30 seconds | Known app scripts on storefront | Back-office apps, no-script apps |
| View source + search | 5-10 min | Same as above, manual | Same as above |
| Network tab live scan | 5 min | Scripts incl. lazy-loaded | Needs app-domain knowledge |
| CostPilot Pro (full audit) | Install + scan | App list, connection, webhook health | Requires Shopify admin access |
More tools from JoyCraft
For Shopify sellers
Chrome extensions
Independent tools, one small team — by JoyCraft.
Seller Tales is a publication by JoyCraft. When we link to our own tools, we say so, and some of those links carry tracking parameters.