Everything is back to normal
Your Rebolt Bundle offers are live and working as expected. Your existing bundle data, settings, discounts, and configurations are safe and intact.
Everything is still there
Your existing offers, settings, and discount rules are safe and intact. No data was lost, and no action is required from you.
No action required
Your existing bundles and settings have been restored automatically. You can continue using Rebolt Bundle as usual.
Your bundles are live
Your bundle offers are live on your storefront and working as expected. No changes or reconfiguration are required.
Everything is restored
Rebolt Bundle is fully operational and your existing offers are back on your storefront. There’s nothing you need to do - just continue using Rebolt Bundle as usual.
Incident Updates
We're committed to keeping you informed. This timeline records every significant update, from detection and investigation to remediation and recovery.
🎉 Rebolt Bundle & Upsell is back!
We’re incredibly happy to share that Rebolt Bundle is officially back and available again!
All required security checks and reviews have been successfully completed, and the app has been restored following Shopify’s review process.
🛍️ Bundle offers and services are being restored for merchants
A huge thank you to our merchants ❤️
To every merchant who waited patiently, supported us, and stayed with Rebolt Bundle throughout the downtime - thank you.
We truly appreciate your trust and understanding during what was a challenging period for our team and our merchants. Your patience gave us the time to complete the necessary security checks properly and work through the recovery process with Shopify.
Rebolt Bundle is back, stronger and more secure than ever. 🚀
Thank you for being part of the Rebolt community.
🎉 Great news - Shopify has completed the security review!
We’re excited to share a major update: Shopify has successfully completed both required security review steps, and Rebolt Bundle has been cleared to move forward with the relisting process.
We are now at the final step before Rebolt Bundle is relisted on the Shopify App Store. We’re currently waiting for Shopify’s final confirmation to complete the relisting.
Final steps
✅ Incident Report (IR) completed
✅ Independent VAPT completed successfully
✅ VAPT and security documentation submitted to Shopify
✅ Shopify security reviews completed
⏳ Final Shopify confirmation — in progress
🚀 App relisting on the Shopify App Store — next
🛍️ Bundle offers restored for merchants
Based on Shopify’s current process, the app relisting is expected to take approximately 24 hours from now once the final confirmation is completed.
We are truly at the finish line now. 🙌
Thank you for your incredible patience, trust, and support throughout this entire process. We know this has been a long journey, and we’re incredibly grateful to everyone who stayed with us.
We’ll share another update as soon as Rebolt Bundle is officially relisted on the Shopify App Store.
Security reports submitted to Shopify, review now underway
We're pleased to share another major milestone.
We have successfully submitted the complete security documentation to Shopify, including the Incident Report (IR) and the independently verified Vulnerability Assessment and Penetration Testing (VAPT) report.
With the submission now complete, the next step is Shopify's final security review. Our team will continue working closely with Shopify throughout the review process and respond promptly if any additional information or clarification is requested.
Current status
✅ Incident Report (IR) completed
✅ Third-party VAPT assessment completed
✅ No malicious vulnerabilities identified
✅ Security documentation submitted to Shopify
⏳ Shopify final security review in progress
🚀 Rebolt Bundle relisting and service restoration pending Shopify approval
This is the final major milestone on our side, and we are now awaiting Shopify's review and approval. We sincerely appreciate your patience, trust, and continued support throughout this process. We will share another update as soon as we receive an update from Shopify regarding the review and relisting.
VAPT successfully completed, final submission in progress
We're pleased to share a major milestone.
Our independent third-party security partner has delivered the final Vulnerability Assessment and Penetration Testing (VAPT) report. The assessment confirms that no malicious vulnerabilities were identified, and we have successfully completed all required security checks.
Our team is now preparing the complete submission package, including the Incident Report (IR) and VAPT report, for Shopify's final security review.
Expected timeline
✅ Incident Report (IR) completed
✅ Third-party VAPT report received
✅ Security assessment completed successfully with no malicious findings
📝 Final documentation being prepared for Shopify
📤 Expected submission to Shopify: 07 August 2026, 1:30 PM UTC
🔍 Shopify final security review
🚀 Rebolt Bundle relisted and services restored for all existing merchants
We are incredibly close to completing this process and getting Rebolt Bundle back online. Thank you for your continued patience, trust, and support throughout this journey. We'll share another update immediately after the final documentation has been submitted to Shopify.
VAPT report nearing completion, final submission next
Our independent security partner has nearly completed the required Vulnerability Assessment and Penetration Testing (VAPT) report. The report is currently in its final review stage and is expected to be ready for submission shortly.
Once the VAPT report is finalized, we will immediately submit the complete security documentation including the Incident Report (IR) and VAPT report to Shopify to support the completion of their security review.
Next steps.
✅ Finalize the VAPT report.
📤 Submit the IR and VAPT reports to Shopify
🔍 Shopify completes its final security review and approval
🚀 Rebolt Bundle is relisted and bundle offers are restored for all existing merchants
We are committed to completing this process as quickly as possible and appreciate your continued patience and support. We will share another update as soon as the documentation has been submitted to Shopify.
Incident report prepared, VAPT in progress
We've completed the preparation of the Incident Report (IR) and our independent security partner is continuing work on the required Vulnerability Assessment and Penetration Testing (VAPT) report in parallel.
The VAPT assessment is progressing as planned and is expected to be completed within the next two days. Once both reports are finalized, we will immediately submit the required documentation to Shopify to support the completion of their security review.
Our team remains fully committed to restoring Rebolt Bundle services for existing merchants as quickly as possible while ensuring all security and compliance requirements are met.
We'll continue to share updates as we reach each milestone. Thank you for your patience and continued support.
Shopify review remains in progress
We've received an update from Shopify confirming that bundle offers will only be restored on storefronts once their security review has been completed. Our team is actively working with Shopify to complete the review process, and our independent security partner is currently performing the required Vulnerability Assessment and Penetration Testing (VAPT).
Our highest priority is to restore Rebolt Bundle for existing merchants as quickly as possible while ensuring all security and compliance requirements are fully met.
We will continue to share updates as they become available. Thank you for your patience and understanding.
Third-party security assessment in progress
Our third-party security team is currently performing the required security testing. We've also requested Shopify to restore access for existing merchants while the review is in progress. We'll share another update as soon as we have more information. Thank you for your patience.
Third-party security firm engaged
We've engaged a specialist third-party security firm to carry out the Vulnerability Assessment and Penetration Testing, and that work is now underway.
We'll share the next update as soon as this step is complete and we hear back from Shopify's team.
Independent security assessment requested
After reviewing our initial report, Shopify's team asked us for two further items as the next step: an independent, third-party Vulnerability Assessment and Penetration Testing (VAPT) report, and a formal Incident Report (IR).
Initial report shared with Shopify
We shared our initial report of the incident with Shopify. Their team confirmed it as part of the review process to restore the app's availability and allow existing merchants to display their bundle offers again.
App temporarily delisted as a precaution
As a precautionary measure, Shopify temporarily delisted Rebolt Bundle from the Shopify App Store, and bundle offers stopped displaying on merchant storefronts. The app remains installed on your store — only the display of bundle offers on the storefront was switched off. All bundle details and data remain saved.
Issue resolved on our side
Our technical team identified and successfully resolved the issue within Rebolt Bundle's systems.
Fix in development
Having traced the cause, our engineering team began work on the fix.
Security issue detected
The issue was brought to our attention through our support team, and our technical team began investigating immediately.
Have questions about your store?
- Choosing a selection results in a full page refresh.
- Opens in a new window.