How to Do a Shopify CRO Audit: A Step-by-Step Process (With Checklist)
A CRO audit is not a list of everything wrong with a store. It is a prioritised argument about what to change first and why.
What a CRO Audit Covers
| Audit type | Question it answers | Primary output |
|---|---|---|
| CRO | Why don't visitors buy? | Prioritised hypotheses |
| UX | Where is the experience confusing? | Usability findings |
| SEO | Why don't we get found? | Technical and content fixes |
They overlap, but the deliverables differ. For the SEO version, see the SEO audit checklist.
Before You Start: Data Hygiene
An audit built on broken tracking produces confident nonsense. Confirm your ecommerce events fire once and only once, understand how consent settings affect what you can see, and filter out bot and internal traffic before you read anything.
Step 1 — Quantitative Review
Funnel by step, then segment by device, traffic source and landing page. You are looking for the largest gap between two adjacent steps, and for segments that behave very differently from the average.
Step 2 — Page-by-Page Heuristic Review
Work the main templates with a short checklist each:
- Homepage — what, who, why trust, where next (detail)
- Collection — filters, sorting, card information (detail)
- Product — objections answered above the fold (detail)
- Cart — total cost, one clear action (detail)
- Checkout — guest option, payment choice, delivery clarity (detail)
Step 3 — Qualitative Research
Heatmaps for attention, recordings for struggle, a one-question survey for stated reasons, and review mining for the objections customers raise in their own words. Your existing reviews and support tickets are the cheapest research you own.
Step 4 — Technical and QA Checks
Page speed and Core Web Vitals, app conflicts, and cross-browser behaviour. Test an actual purchase on a real phone. A surprising share of "conversion problems" turn out to be a bug on one device.
Step 5 — Prioritise and Write Hypotheses
Convert each finding into a testable statement:
Because [evidence], we believe that [change] for [audience] will cause [measurable outcome]. We will know when [metric and threshold].
A finding without this structure is an opinion.
DIY vs Automated vs Agency
| Approach | Time | Depth | Blind spot |
|---|---|---|---|
| DIY | Days | Varies | Familiarity blindness |
| Automated audit | Minutes | Broad, shallow | No customer context |
| Agency audit | Weeks | Deep | Cost |
The Checklist
- Tracking verified and bot traffic excluded
- Funnel mapped with the biggest gap identified
- Each main template reviewed against its heuristics
- Heatmaps and recordings reviewed for the worst step
- Reviews and support tickets mined for objections
- Speed and Core Web Vitals checked on mobile
- Real purchase completed on a real device
- Every finding written as a hypothesis
- Hypotheses scored and sequenced
Frequently Asked Questions
How long does a CRO audit take?
A focused DIY pass takes a few days. A thorough agency audit typically runs two to three weeks including research.
What does it cost?
Anything from free automated tools to a substantial project fee. Judge on whether the deliverable is a prioritised plan or a list of observations.
How often should I audit?
A full audit once or twice a year, with a light review after any redesign, replatform or major app change.
Can AI audit my store?
It can produce a fast, broad issue list — useful as a starting point. It cannot know your customers or your margins, so it cannot prioritise for your business.
What do I do after the audit?
Ship the high-confidence, low-effort items, then test the uncertain ones.
Where ConversionAB Fits
If you would rather have specialists run steps 1–5, ConversionAB delivers CRO audits as a prioritised roadmap with the development to execute it. For a step-zero baseline needing no store access, FixMyStore runs an automated audit first.