Security
How we protect your accounts, your leads, and your clients data.
Encryption in Transit
Every LonarX site and form is served over HTTPS with TLS. Credentials and lead data are never transmitted in plaintext.
Least-Privilege Access
Team members get the minimum access needed for their role. Client account access is granted per engagement and revoked when it ends.
Credential Handling
Client credentials are stored in an encrypted password manager, never in email, spreadsheets, or chat.
Backups
Sites we host are backed up on a rolling schedule so content and lead data can be restored.
Dependency Hygiene
Platforms, plugins, and themes are kept patched. We monitor for known vulnerabilities in what we deploy.
Incident Response
If an incident affects your data, we investigate, contain it, and notify you promptly with what we know.
Reporting a Vulnerability
Found a security issue on a LonarX property? Email info@lonarx.com with steps to reproduce. We will acknowledge your report and keep you updated. Please give us a reasonable window to fix the issue before disclosing it publicly, and do not access or modify data that is not yours while testing.
Related
See our Privacy Policy for how we collect and retain information, and our Terms of Service for contractual obligations.