Encrypted connections
All Red Zircon websites and services are served over HTTPS, and mail apps connect over encrypted IMAP and SMTP.
Security built into every layer
How Red Zircon protects your accounts, your data and our services.
How we protect you
Security at every layer
Strong account security
Passwords are stored with modern one-way hashing, and password resets use single-use links that expire.
Multi-factor for staff
Every Red Zircon staff and administrator account requires an authenticator-app code in addition to a password.
Least-privilege access
Customers and staff only see what their role allows, and administrative access is separated from customer accounts.
Secrets protected at rest
Sensitive configuration and authentication secrets are encrypted before they are stored.
Responsible disclosure
If you believe you have found a security issue, please contact us so we can investigate and fix it quickly.
FAQ
Questions about trust & security
Is my connection to Red Zircon encrypted?
Yes. Our websites, the console and ZirconMail all use encrypted connections.
Do you support two-factor authentication?
Yes. Staff and administrator accounts require authenticator-app codes.
How do I report a vulnerability?
Use the contact page and choose “Security”. Please include enough detail for us to reproduce the issue.
Next step
Report a security concernReady to get started?
Tell us what you need and we will come back to you with a plan.