Zack Deveau

Title not stated on Deveau's author page; the post is written from Shopify's Application Security team, Shopify.

Shopify engineering blog author; earlier post (2022) on Shopify's bug bounty program; July 2026 post on the security scanning harness.

Why their word counts: Writes about Deveau's own team's security tooling; the post is the company's own publication. Role is inferred from the post text and 2022 topic, not stated on Deveau's page.

Profile from this source, checked 2026-10-19.

In their words

Over roughly six weeks, we’ve run thousands of scans, produced over 300 findings ranging from defense-in-depth improvements to resolved security incidents.

Zack DeveauTitle not stated on Deveau's author page; the post is written from Shopify's Application Security team · Practitioner, Shopify

Post: Building an agentic harness that outlasts the model, Shopify engineering blog, July 29, 2026.

300 function agent volume, about six weeks, as of 2026-07-29. Level not stated

Checked against the source [ Grade B ] Said in the last year Shopify: $11.6 billion revenue, FY2025 Passage page