Website 2027 Breakage Audit: Certs, Shopify, PayPal, Azure avatar

Website 2027 Breakage Audit: Certs, Shopify, PayPal, Azure

Pricing

from $7.00 / 1,000 site auditeds

Go to Apify Store
Website 2027 Breakage Audit: Certs, Shopify, PayPal, Azure

Website 2027 Breakage Audit: Certs, Shopify, PayPal, Azure

One audit per website for every dated forced change of 2026-2027: Mozilla root removals, 100-day certificates, Shopify script tags, PayPal WPS buttons, Azure classic CDN, Drupal 10 and PHP end of life, Chrome XSLT, dead Facebook/Maps embeds. Fixes per site.

Pricing

from $7.00 / 1,000 site auditeds

Rating

0.0

(0)

Developer

Ashish Agarwal

Ashish Agarwal

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

5 hours ago

Last modified

Share

2026–2027 is full of dated, forced changes that quietly break websites. This Actor audits each site against all the ones we track and returns one report per site with dated findings and the fix for each — made for agencies, MSPs and IT teams who look after many sites.

CheckDeadlineWhat breaksSource
Drupal 10 end of life9 Dec 2026no more security releasesdrupal.org schedule
PHP 8.2 end of life (from X-Powered-By)31 Dec 2026no more security fixesphp.net
PayPal WPS Buy Now / Add to Cart buttonsany time after 1 Jan 2027old payment buttons stopPayPal developer WPS deprecation page
Shopify script tags1 Mar 2027apps vanish from the storefrontshopify.dev changelog
Azure Front Door (classic) / CDN classic31 Mar / 30 Sep 2027classic endpoints may stop from 1 Apr 2028Microsoft Learn
Mozilla root removals (Go Daddy G2, USERTrust, COMODO, GlobalSign R3…)15 Apr 2027HTTPS fails in Firefox, curl, Python, Node.jsMozilla
Shopify legacy customer accountssunset date to be announcedlogin flowShopify changelog, 26 Feb 2026
Google Merchant Center 500×500 product images (Shopify stores, from products.json)31 Jan 2027small images disapproved / auto-upscaledMerchant Center help
Dead or dangerous scripts: polyfill.io and its sister CDNs (hijacked June 2024), Universal Analytics (stopped 1 Jul 2023), Google Optimize (sunset 30 Sep 2023)already pastsecurity risk / no data / slower pagesCloudflare, Censys, Google
Facebook Like button / Comments plugin10 Feb 2026rendered as an invisible 0×0 boxMeta for Developers
Google Maps KmlLayer, Heatmap Layer, Drawing libraryApr / May 2026map features no longer availableGoogle Maps deprecations
Firebase Dynamic Links (page.link), Skype buttons, Stamen tiles, Instafeed2023–2025dead links, buttons and grey mapsFirebase, Microsoft, Stadia Maps, Meta
Maps that no longer load: keyless Google Maps, retired Google Maps v2 / Fusion Tables, Azure Maps v1, Leaflet's old CDN, Mapbox v3 tilesvarious, already pastgrey or "for development purposes only" mapsGoogle, Microsoft (+ hosts checked)
Dead payment / consent / media embeds: old Square payment form, old Quantcast consent script, Azure Media Playeralready pastcheckout, consent banner or video brokenMicrosoft (+ hosts checked)
Dead social and comment widgets: AddThis, Gfycat, Facebook Customer Chat, Livefyre, YUI CDN2022–2024blank widgetshosts checked 27 Oct 2026
HTTPS certificate bought and installed by hand (long-lived OV/EV/DV, not managed)15 Mar 2027 (100-day maximum)about 4 manual installs a yearCA/B Baseline Requirements
Browser-side XSLT (XSLTProcessor, XSL-styled XML pages)17 Nov 2026 (Chrome 158)content rendered by XSLT stops showing in ChromeChrome for Developers
Zoom Meeting SDK for Web below 4.0.0 (version shown; checked against Zoom's minimum-version table)7 Nov 2026, then every quarterattendees can't join embedded meetingsZoom KB0061130
Twitch embeds without parent= (or not listing this host)live requirementplayback error instead of the streamTwitch
YouTube embeds on pages with Referrer-Policy: no-referrer / same-originlive requirement (updated 15 Oct 2026)player may show an error or lose featuresYouTube
Bing Maps V8 web controlfree keys already retired; Enterprise 30 Jun 2028credentials error on the mapMicrosoft Learn

Each site's home page, its HTTPS certificate chain (real path validation against today's and the post-April-2027 Mozilla root store) and its DNS (CNAME chain, and the hosts its page assets load from) are checked. Public data only.

Input

{ "siteUrls": ["https://www.example.com", "shop.example.org"] }

Or siteListUrl: a CSV/TXT or published Google Sheets CSV link with your client list.

Output (one item per site)

{
"url": "https://www.godaddy.com",
"risk": "high",
"riskScore": 3,
"nextDeadline": "2027-04-15",
"platform": [],
"findings": [
{"check": "certificate", "severity": "high", "deadline": "2027-04-15",
"title": "HTTPS chain only reaches 'Go Daddy Root Certificate Authority - G2', removed by Mozilla on 15 Apr 2027",
"action": "Ask your CA for a chain to one of its newer roots..."}
]
}

risk is high, medium, low (info only), none or unreachable (not charged). PayPal buttons are checked on the home page only; for a whole-site crawl use the dedicated PayPal Legacy Button Finder.

Pricing

Pay per site audited (all checks included). Sites that can't be reached are free.

More tools from the same author

Product names (Mozilla, Shopify, PayPal, Microsoft Azure, Drupal, PHP) are trademarks of their owners. This Actor is independent and not affiliated with any of them.