CITT

    Scan results

    Jetpack – Website Builder

    Android

    Jetpack – Website Builder from Automattic, Inc. Create and manage WordPress websites and blogs on the go. Features include real-time analytics, content creation tools, social media integration, and security features.

    CITT SCORE
    52
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: WordPress site owners comfortable with standard analytics

    What It Means For You

    Account activity and app behavior is monitored by Sentry for crash reporting, and Firebase handles push notifications. Google Sign-In links a user's Google identity to their account. Support interactions are processed through Zendesk, a third-party service.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (11)

    Data Security

    6 total
    2 Critical
    2 High
    2 Medium

    Network Security

    2 total
    1 Critical
    1 Medium

    Code Security

    3 total
    1 High
    2 Medium

    Third-Party Services

    Firebase Cloud Messaging, Google Sign-In, Tenor GIF API, Zendesk Support, Sentry, React Native

    Security Strengths

    • ✓Application passwords encrypted with AES-256-GCM in Android Keystore
    • ✓Modern Android Target SDK 35 with latest security features
    • ✓Minimal permission requests with appropriate justifications
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    sensitive data
    social
    camera
    media
    authentication
    cloud backup
    webview
    network communication
    third party sdks

    Package

    com.jetpack.android

    Version

    26.3.1 (Build 1478)

    Analysis Date

    Nov 19, 2025

    Classes Analyzed

    23,376

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 6 findings (2 critical, 2 high, 2 medium)

    Network Security - 2 findings (1 critical, 1 medium)

    Code Safety - 0 findings

    Privacy - 0 findings

    Privacy Concerns

    What Data is Collected

    The app collects data linked to user accounts and usage patterns. Sentry captures crash reports that include device state and app context at the time of a crash. Firebase Cloud Messaging ties the user's device to their account to deliver push notifications. Google Sign-In associates the user's Google identity with their Jetpack account.

    Third-Party Data Sharing

    User data is shared with Google through Firebase Cloud Messaging and Google Sign-In, with Sentry for crash diagnostics, with Zendesk to handle support requests, and with Tenor for GIF content delivery. Each of these services processes user data under its own privacy policy.

    Understanding the Scores

    • Security: 48/100
    • Privacy: 58/100
    • Data Security: 42/100
    • Network Security: 60/100
    • Code Safety: 68/100
    • Data Collection: 75/100
    • Data Sharing: 70/100
    • User Control: 62/100

    Positive Security Features

    • No notable positive security practices were identified for this version of the app.

    Areas for Improvement

    • Some data handled by the app is not sufficiently protected, which could expose user information to unauthorized access on the same device or over a shared connection.
    • Network communications lack consistent safeguards, meaning data may be sent without full protection on public Wi-Fi.
    • The controls available within the app for managing what data is collected and shared are limited.

    About This Analysis

    App Details

    • App: Jetpack - Website Builder
    • Package: com.jetpack.android
    • Version: 26.3.1 (Build 1478)
    • Scan Date: 2025-12-19

    Right of Reply

    Developer not yet contacted