Security Policy

We take the security and integrity of Letterora seriously. This site stores no personal data server-side, but we still welcome security research on the service.

Reporting a vulnerability

If you believe you have found a vulnerability that affects the availability or security of Letterora, please email support@letterora.com with a description and reproduction steps.

Scope

In scope: letterora.com and its subpaths. Out of scope: the legacy word-tools pages, denial-of-service testing, social engineering, physical attacks, and issues in third-party dependencies that cannot be exploited on this site.

Credits

This platform is based on the open source Monkeytype project (GPL-3.0). Vulnerability reports about the upstream project can also be sent to the Monkeytype project on GitHub.