TypoMonitor
TypoMonitor Security
TypoMonitor is designed to need as little access as possible. It reads public pages, asks for no CMS credentials and keeps a short, defined set of data.
Read-Only Scans of Public Pages
A scan behaves like a visitor with a very good memory. TypoMonitorBot requests public pages, reads the visible text, and follows links and images to check that they respond. It does not submit forms, click buttons that change data or send anything that would alter your site.
Because the scan only sees what any visitor could see, it cannot expose private content. Pages behind a login, pages blocked by your robots.txt file and addresses that point to private networks are not scanned.
No Access to Your CMS or Hosting
TypoMonitor never asks for the password to your content management system, your hosting account, your database or your code repository. Setup consists of adding a domain and confirming your e-mail address. There is nothing to install on your site and no plugin that could become a point of entry.
This also means that removing TypoMonitor is simple. Stop the scans or block the crawler, and nothing is left behind on your side.
- No credentials for your CMS, hosting or analytics are requested.
- No code or script is added to your pages.
- No changes are written to your site at any point.
Encryption and Respect for Crawl Rules
Data sent between your browser and TypoMonitor travels over encrypted connections, and the scanner requests your pages over the secure address whenever your site offers one. Sign-in uses a one-time code sent to your e-mail address, so there is no reusable password to leak.
The crawler honors robots.txt. If you disallow TypoMonitorBot, it stops. If you want to slow it down, you can set a crawl delay. The bot page explains the exact lines to use, and the scan identifies itself clearly so that your logs always show who is asking.
What We Keep and What We Do Not
We keep the e-mail address you sign up with, the sites you add, the settings you choose and the findings from your scans, because the service cannot work without them. We also keep technical data such as the IP address used for a request, which helps us prevent abuse.
We do not sell your data, and we do not use the text of your pages for anything other than showing you your own results. The privacy policy describes each category in detail, including how long it is kept and how you can ask for it to be removed.
If you believe you have found a security problem, write to [email protected] with the details. We read every report and respond to the address you write from.