What Does a Proper Shopify Store Audit Actually Check?

Search “Shopify audit” and you’ll mostly find lead-gen forms promising a “free audit” that turns out to be three bullet points and a sales call. That’s not an audit, it’s a pitch with a technical costume on. If you’ve been offered one of these and walked away with nothing you couldn’t have found yourself in ten minutes, you’ve seen the problem firsthand.

A proper Shopify audit is a structured technical and commercial review of your store, covering everything from how Google crawls your product pages through to whether your checkout is configured correctly and whether your analytics data can actually be trusted. It should leave you with specific findings, not vague reassurance.

This post breaks down exactly what should be covered in a genuine Shopify audit, section by section, so you know what to expect, and what to push back on if an agency’s version is thinner than this.

Technical SEO: how Shopify actually gets found

Shopify has its own SEO quirks that a generic SEO checklist won’t catch. A proper audit checks:

URL structure, Shopify forces /products/, /collections/, /pages/, and /blogs/ prefixes that can’t be removed natively. The audit should assess whether your slugs, collection structure, and blog URLs are working with that constraint rather than against it.
Duplicate content from collection filtering and sorting, filtered and sorted collection URLs (?sort_by=, tag filters) can generate large numbers of near-duplicate indexable pages if canonical tags aren’t set correctly.
Canonical tags, Shopify sets these automatically on most page types, but apps and custom templates can override or break them.
Robots.txt and sitemap behaviour, since 2021 Shopify’s robots.txt is editable via a robots.txt.liquid template, so the audit should check whether it’s been touched, and whether the auto-generated sitemap.xml is submitted correctly in Google Search Console.
Structured data, product, breadcrumb, and organisation schema, checked against Google’s Rich Results Test, not just “is a schema app installed.”
Indexation and crawl issues, orphaned pages, out-of-stock products still indexed with no redirect strategy, and old collection or product URLs left as broken links after past changes.

This layer overlaps heavily with Shopify SEO work, and a genuine audit should reference specifics from your store rather than generic best practice.

Site speed and Core Web Vitals

Page speed on Shopify is mostly determined by theme code and app load, not hosting, Shopify’s infrastructure itself is fast. A proper audit looks at:

Core Web Vitals, Largest Contentful Paint, Cumulative Layout Shift, and Interaction to Next Paint, ideally checked on real product and collection pages, not just the homepage. Shopify’s own theme performance report (Online Store > Themes > your theme > Store speed report) is a useful starting reference, but it should be cross-checked against PageSpeed Insights or a similar tool on actual key pages.
Render-blocking scripts, how many apps are injecting JavaScript or CSS into the <head> rather than loading deferred or via theme app extensions.
Image handling, whether images are using Shopify’s responsive srcset and native lazy loading, or whether oversized images are being served uncompressed.
Third-party script weight, reviews, chat widgets, personalisation tools, and tracking pixels all add weight; the audit should quantify what’s actually costing load time.

This is where a real audit differs sharply from a superficial one, it should name specific apps and specific pages, not just report a single Lighthouse score.

Theme and Liquid code quality

This is the part most “free audits” skip entirely, because it takes real Shopify development experience to assess. A proper review checks:

Whether the theme is built on Online Store 2.0 architecture (JSON templates, sections everywhere) or an older Liquid-only structure that’s harder and slower to maintain
How much custom code has been added directly into theme.liquid versus organised into proper sections, snippets, and assets
Whether metafields and metaobjects are being used appropriately for structured content, or whether content is hard-coded in a way that makes updates risky
Signs of “patch on patch” development, duplicated logic, dead code, conflicting CSS overrides

App bloat: what’s actually installed and why

Most established Shopify stores accumulate more apps than they realise. A proper audit produces an actual inventory:

Every currently installed app, what it does, and whether it’s actively used
Which apps inject scripts into the storefront (via theme app extensions or legacy methods) versus which only run in the admin
Which apps have overlapping functionality (two review apps, two upsell apps) that could be consolidated
Whether any app has excessive Admin API access scopes it doesn’t need, a security as well as performance concern

In our experience, it’s common to find at least a handful of “zombie” apps still injecting code long after the store stopped actively using them.

Conversion and UX friction

An audit isn’t just technical, it should assess whether the store is actually easy to buy from:

Navigation and search, can a new visitor find what they want in two or three clicks, and does on-site search return sensible results for common misspellings and synonyms?
Product page structure, image quality and count, review placement, clear shipping/returns information, and whether key buying questions are answered above the fold
Cart and mini-cart behaviour, does adding to cart give clear feedback, and is upsell/cross-sell logic helping or cluttering the experience?
Mobile-specific friction, tap target sizing, sticky add-to-cart, and whether menus and filters are genuinely usable on a phone, not just “not broken”

This should map to concrete recommendations, ideally the kind that would feed into a proper conversion rate optimisation plan rather than generic “improve your UX” commentary.

Tracking and analytics accuracy

This is one of the most commonly skipped areas, and one of the most damaging when it’s wrong. A store making decisions off broken analytics is worse off than one with no analytics at all. The audit should check:

Whether GA4 is correctly configured via Shopify’s native integration or the Web Pixels API, and whether ecommerce events (view_item, add_to_cart, purchase) are firing with accurate values
Whether Google Search Console is verified and whether the data lines up with what’s actually happening in the store
Duplicate or conflicting tracking, the classic case of two versions of a Meta pixel or GA4 tag both firing, inflating or corrupting reported conversions
Whether conversion values reported to ad platforms match actual order values, including discounts and currency conversion for international sales

Security and permissions

Rarely covered in a superficial audit, but genuinely important:

Staff account permissions, are former employees or old contractors still listed under Settings > Users and permissions?
Two-factor authentication enforced on all staff accounts
Third-party app Admin API scopes reviewed for anything broader than the app actually needs
Whether custom apps or old private apps with API access are still active and necessary

Checkout configuration

Checkout is one of the most tightly controlled parts of Shopify, which is exactly why it’s worth auditing carefully rather than assuming it’s fine by default:

Whether checkout settings (Settings > Checkout) reflect current policy, shipping rates, tax settings, customer accounts requirements, and abandoned checkout follow-up
For Shopify Plus stores, whether checkout customisations are built using Checkout Extensibility (the current, supported approach) rather than legacy checkout.liquid customisations, which Shopify retired for Plus merchants in 2024
Payment and shipping options actually available at checkout match what’s promoted elsewhere on the site (for example, Afterpay or Zip badges shown on product pages but not actually offered at checkout)
GST and pricing display correctly for Australian customers, and international pricing/tax behaviour is correct if you sell overseas, this is worth checking directly against Shopify GST setup if you haven’t reviewed it recently

A practical framework: what a real audit report should contain

A genuine audit deliverable should include, at minimum:

A prioritised issue list, not just “issues found” but ranked by impact and effort, so you know what to fix first
Evidence per issue, a screenshot, a specific URL, or a specific score, not a vague generalisation
A technical section and a commercial section, separating “this is broken” from “this is costing you conversions or traffic”
Clear ownership, which findings are quick fixes your existing developer can handle, and which need deeper specialist work
No forced upsell, the findings should stand on their own, whether or not you engage anyone to fix them

If an “audit” you’ve received doesn’t include specifics like exact pages, exact apps, or exact settings, it’s a sales document, not an audit.

When to bring in a specialist

You can run a basic version of this yourself using Shopify’s built-in reports, PageSpeed Insights, and Google Search Console. Where it usually pays to bring in outside help is when you need someone to interpret the findings correctly, prioritise them against your actual business goals, and check the parts that require real Shopify development experience, theme code quality, app script auditing, and checkout configuration in particular. That’s the level of depth we go to in a Shopify audit: a full technical, SEO, and conversion review of the store as it actually exists, not a generic template report.

FAQ

How long does a proper Shopify audit take?
A thorough audit covering technical SEO, speed, theme code, apps, tracking, and checkout typically takes one to two weeks depending on store size and complexity, not a same-day turnaround. Same-day “audits” are almost always automated reports with light or no human review.

Is a free Shopify audit worth anything?
Some are genuinely useful as a first pass, but most free audits are automated tools (a PageSpeed score, a basic SEO scan) repackaged as a lead-generation offer. Treat them as a starting point, not a full picture, and be wary if the findings are generic enough to apply to any store.

Do I need a full audit if my store is new?
A new store benefits more from a setup review focused on foundations, theme structure, tracking configuration, and checkout settings, than a full audit, since there isn’t yet enough traffic or sales history to assess conversion patterns properly.

How often should an established Shopify store be audited?
Once a year is a reasonable baseline for a stable store, and more frequently (every six months) if you’re adding apps often, running a Shopify Plus store with active development, or have recently changed theme or checkout configuration.

Will an audit tell me exactly how much revenue I’m losing?
Be cautious of anyone who claims precise revenue-loss figures from an audit alone, that requires testing, not just inspection. A credible audit will flag likely-impact issues (slow LCP on product pages, broken tracking, checkout friction) without inventing a dollar figure it can’t actually prove.

Next step

If you want to know exactly where your store stands rather than guessing, book a call and we’ll talk through what a proper audit would look like for your specific setup.