Shop The Bulk Store — From Daily 403 Outages to Sub-2-Second Loads and AI Visibility

Bulk Candy Retail Magento E-Commerce Metro Detroit

The Client

Shop The Bulk Store (shopthebulkstore.com) is a family-owned bulk candy and snack retailer in Taylor, Michigan, serving Metro Detroit and the Downriver communities since the 1980s. The online store runs on Magento Open Source 2.4.7 with more than 3,000 products, from candy by weight and chocolates to imported and Japanese candy, squashies, sodas, spices, and toys.

The Problem

Real shoppers were intermittently hitting 403 Forbidden errors, raw unstyled pages, and page loads that took 10 to 15 seconds. Some categories showed "we can't find products" even though the products existed, and the Add-to-Cart button would sometimes load faded and unclickable. The owner could not reproduce it from the store's own network, which is exactly why it had gone undiagnosed.

The Approach

1. Reproduced the failures from a real external client instead of the server (the server IP was whitelisted everywhere, which had been hiding the real visitor experience).
2. Found an over-aggressive request limiter (mod_evasive) banning visitors for 30 minutes after a normal Magento page fired 50+ asset requests in one second, then removed it and moved abuse protection to the payment endpoint where it belongs.
3. Fixed the speed: a caching rule was forcing a 13 MB merged JavaScript bundle to re-download on every page view, with no compression. We scoped no-store to HTML only, added Brotli and Gzip, and set far-future immutable caching for fingerprinted static assets.
4. Restored empty category pages by switching their sort away from a field the search engine could not sort (OpenSearch), and hardened the toolbar so it can never blank a page again.
5. Fixed Add-to-Cart, which a URL rewrite was breaking by 404-ing Magento's own UI templates.
6. Built relentless monitoring: an auto-healing cart canary every 2 minutes, a headless click-to-cart test every 6 minutes, and an exception sentinel, all alerting on failure.
7. Added AI search visibility: full Store and FAQ structured data, a robots policy welcoming ChatGPT, Claude, Gemini, Perplexity, Copilot, Siri, and Alexa, dedicated answer pages, and an llms.txt site summary.

The Result

Page loads dropped from 10-15 seconds to roughly 0.9-1.7 seconds, with the first-load payload shrinking from 13.1 MB to 2.9 MB and zero bytes re-downloaded on later pages. The 403 errors and unstyled pages are gone, every category renders, and Add-to-Cart is verified working in a real browser on every monitoring cycle. The store now publishes machine-readable structured data and answer content built for AI search engines.

Measurable Outcomes