Security How We Protect Your Sites

Security Leadership

Security at 1REALTOUR LLC is led by Joseph A. Smith, Chief Executive Officer and Security Lead. Joseph is accountable for the security of 1REALTOUR's own systems and of the servers and websites we host and manage for our clients.

Day-to-day security work is carried out by our development and operations team under his direction.

What We Protect

Our security work covers only systems we own or manage under client hosting and maintenance agreements:

• Our Linux servers, hosting control panels, and internal applications
• Client websites and online stores we build, host, or maintain

How We Do It

• Continuous uptime, certificate, and server monitoring with on-call alerts
• Malware scanning on hosted sites and prompt cleanup of compromised sites
• Regular software and security updates, with checks after each change
• Automated off-site backups with tested restores
• Single sign-on with multi-factor authentication for staff access
• Credentials kept in a central secrets manager, not in code or email
• Incident investigation and notification to affected clients

Report a Security Issue

If you believe you have found a security vulnerability in a 1REALTOUR system or a site we host, please email ceo@1realtour.com with the affected address and steps to reproduce. Please do not access data that is not yours or disrupt service while testing. We will acknowledge your report and keep you informed while we fix it.

Our machine-readable contact file is at /.well-known/security.txt.