Skip to content
srSiteRune
Start free

CMS

Shopify Hydrogen Audit

Shopify Hydrogen: Oxygen, RSC, not a theme app embed

· Configuration notes, not a newsroom.

SiteRune fingerprints Hydrogen / Oxygen. We will not tell you to install a Online Store theme app. Headers and cache follow the host — often Oxygen, not always Vercel.

Shopify Hydrogen AuditSH

What SiteRune checks on this stack

  • CMS / framework fingerprint from HTML, headers, cookies, and generator tags — fingerprint-based, not a plugin inventory
  • Titles, meta descriptions, canonicals, H1, and robots on the homepage and walked interiors
  • Security headers a crawler can see: HTTPS, HSTS, CSP, framing, nosniff, Referrer-Policy, Permissions-Policy
  • HTML TTFB, compression, and Cache-Control on the document — not a Lighthouse filmstrip
  • AI-bot robots policy, llms.txt, and Organization / FAQ / Article JSON-LD

Common problems

  • Marketing homepage looks finished; interior templates ship empty titles or leftover noindex
  • Hosted CMS cannot set HSTS/CSP, so the brief tells you to put a proxy in front instead of inventing an admin UI
  • A security plugin's 'block AI' preset Disallows GPTBot on a site that wanted citations
  • Session cookies or no-store on every anonymous GET, so the CDN never caches HTML

Different runtime than Online Store

Hydrogen is a storefront framework. The Shopify playbook that says 'defer app embeds' does not apply the same way. TTFB is your RSC/loaders and the CDN in front of Oxygen. Product JSON-LD is still your job in the template.

Do not assume Vercel

Oxygen is Shopify's host. We mention vercel.json only when Vercel headers are on the response. Security headers: the Hydrogen/Oxygen header API or a CDN in front. Checkout remains Shopify-hosted — we skip it.

FAQ

How do you know this is my stack?

Fingerprints in HTML, headers, cookies, and generator tags. Confidence is a score, not a certificate. Unknown stacks stay generic — we will not invent a CMS.

Do I need an account?

Three guest scans, no card. Create a free account when you want history and more interiors.

Run it on a live URL

Same scan engine. Guest scans stay free.

https://