@ShinghiD@grok The one day the entire market is nuked (external factors) you post this screenshot thinking it’ll legitimize your claim, lol. Ya Claude can replicate basic apps, yes it might delete 20% of the App Store, but Shopify apps are not cooked, as long as they’re not an ai wrapper.
There’s been a lot of speculation about @aftersell over the last week, including some erroneous claims about checkout hijacking. We understand given what's going on in the ecosystem but here's what actually happened to Aftersell 👇
Starting October 7th, an attacker sent millions of malicious requests to our servers. Most failed or did nothing, but the attack exposed non-sensitive upsell configuration data (e.g. discount settings) from a subset of 22 stores and they have of course been notified. It was an automated and almost certainly AI-assisted attack. It sent millions of requests in a single day, and switched to a pool of 1,460 rotating IP addresses. The moment we blocked one, the next one would appear. We closed the vulnerability within two hours.
For everyone speculating about checkout hijacking, I want to make it very clear that this DID NOT happen to us. No shopper data or payment info was exposed, and no money moved. Aftersell merchants do not need to take any action - the app remains fully functional.
No sensitive data was exposed, but the responsible thing was to take ownership and make sure the security of our product came first. I’d rather take the install hit before BFCM than ask merchants to trust us before we’d checked everything.
Here’s what we’ve done since:
→ We’ve been working closely with Shopify’s security team and have brought in third parties for external incident review, VAPT, and specialized pen testing.
→ Aftersell is part of Rokt, and Rokt’s security team has run this investigation. The team is led by an ex-FBI cybersecurity leader and recently joined Anthropic’s Cyber Verification Program, which gives our security team access to Anthropic’s most capable models for defensive work. These models are now continuously reviewing every public route on Aftersell and are built into our security stack.
→ We have informed the FBI and other partners that share cyber threat intelligence to help stop attackers in the ecosystem. We will continue to work with the cybersecurity community to ensure the highest of security standards on Aftersell.
→ We are working with Shopify to ensure we get re-listed as soon as possible so new stores can install and set up Aftersell ahead of BFCM.
Our commitment to the merchants who use or are considering Aftersell:
1) Security comes first on our roadmap. Our entire engineering team has spent the last few weeks on security work, and we’re using AI to defend against AI, with those same models now built into our security stack. We’ll keep investing, and we’ll stay transparent. If something affects your store, you’ll hear it from us. This is an always on program. We contacted affected merchants, we will always do this to ensure you know what is going on.
2) We’ll share what we learn. Attacks like this are becoming more common by the day across all platforms and we want to help our partners get ahead of them too. More on this soon.
If your Shopify app has been hit by something similar, DM me. Happy to share our notes and learnings.
We take a lot of pride in serving a large portion of the Shopify ecosystem, and we’re committed to building the best and most secure upsell product out there.
If you have questions, comment below or DM me directly.
Aftersell is my worst nightmare as a seller.
Every week I gotta learn a new product cause our product team just can't stop shipping cool shit, I'M TIRED GRANDPA!
Meet the Aftersell Cart.
Have an idea. Prompt AI. Build a new variation in seconds.
→ Test an entirely different cart layout
→ Redesign how your upsells look and where they appear
→ Build custom sections that feel like your brand
A/B test, see what shoppers respond to, then build the next version.
That’s the part I’m excited about.
This turns “we should try this” into a new variation in seconds so you can test and improve faster.
We’re breaking this down in a live masterclass with Grüns on Oct 22.
Sign up and get 3 cart templates:
https://t.co/1X4gXb65J8
🚨🚨🚨🚨 We have committed over $2,000,000+ to launch the Aftersell affiliate program.
You can earn $35,000 for introducing a brand to @aftersell Get paid just for making the intro, and again when a brand activates Rokt Thanks. You can join the program at 👉 https://t.co/gZIRdeT53Q
Whoever leaked our lab results… not cool 😑
But now that it’s out there, we spent the year testing one hypothesis: Can every order be worth more?
The results are in. Explore all six experiments: https://t.co/vgRoyyYuZx
created this cart template that PRINTS in less than 5 minutes with @aftersell 's cart
who wants it? our cart allows you to upload/download json cart files to get started quicker
Top 3 reasons why @aftersell has grown 5x FASTER post-acquisition:
→ Client value > personal incentive
→ "Fuse to the spine" of the parent co
→ Strong support from parent co's leadership
Very basic but super important for any business partnership.
Do you love ecommerce & Fantasy Football as much as I do?
I'm looking for eleven brands, agencies, or tech operators to join our Fantasy Football League.
- Standard PPR Rules
- Live Draft
- $0 buy-in w/ Cash Prizes for 1st & 2nd Place
- Limit to one "GM" per Company/Brand
- Using https://t.co/rZxoPxoEvu for the league
DM or Comment, if you're interested!
Introducing @aftersell's next frontier to dominate...Aftersell Cart 👇
I've wanted to own cart forever and become the best full funnel upselling platform...and we're finally there. Shoutout to Mike from Gruns for partnering with us on this.
There's 4 primitives in every Aftersell product:
1) Targeting - who you're showing the offer to
Aftersell Cart integrates into our new API-driven strategies feature that allows you to target exactly DOWN TO THE MODULE which customer will see what part of the cart.
2) Layouts - how the offer looks to the end customer
This is probably the coolest. We've got a fully programmable JSX-based cart that you can customize. Every pixel can be configured. We're rolling out our own AI-based tooling to build carts with on top of this. Our team is owning design + launch for some of our early users - comment below if you want us to take a look.
3) Reporting - how the offer is performing
We launched our new reporting product a few weeks ago and we've seen people building insane dashboards with it already. Cart now hooks into our reporting infrastructure and you'll be able to build context aware dashboards across the entire transaction.
4) Testing - how to make the offer perform better
You can set up multiple carts and manage them as you want between different promotional seasons, brand testing, upsell testing, etc. We allow full end-to-end testing directly in Aftersell Cart without having to manage cart testing in another tool.
Comment what else you'd love to see in our cart product.
7 yrs building @Aftersell, I’m still surprised by the PPU ideas our team comes up with.
One for the top 1% brands:
Add a looping GIF showing how many customers accepted your offer.
“1,000+ customers added this”
Instant social proof.
Comment and I’ll DM you how to setup.
The best subscription upsell might just be... an upgraded plan.
Introducing Subscription Upgrades.
Turn a monthly subscriber into a quarterly subscriber, right after checkout.
One click for them.
More cash upfront. Higher LTV for you.