Skip to content
Trust & Legal

Security & responsible disclosure

How to protect your account and report a concern about LetsConfigure.

Montréal, Québec, CanadaUpdated

Help us protect the learning space.

Verified email and two-factor sign-in

Learner accounts require email verification and an authenticator app. After registration, open the verification email, return to finish authenticator setup, then sign in with your password and a six-digit code. Keep your setup key or an authenticator backup securely. You can enroll a backup authenticator from Account security.

Protect your account

  • Use a unique password and sign out on shared devices.
  • Enter payment details only on the hosted payment page reached through LetsConfigure.
  • Use fictional values in labs; never enter live network credentials or private keys.

Controls and scope

The application uses verified identity tokens, server-side access checks, isolated learner configurations, and signature verification for billing events. These controls do not amount to an independent audit or a security certification. The Trust Center describes the current launch scope.

Send a security report

Email support@letsconfigure.cloud with the subject “Security report”. Include the affected URL, a short description, safe reproduction steps, and the potential impact. Redact secrets and other users’ information. Ask for a suitable transfer method before sending sensitive evidence.

Do not interrupt the service or access information without authorization. There is no public bounty program or guaranteed reward. We cannot publish a response-time guarantee before the support process is operational.