XZONO, operated by XZONO (PTY) LTD (Registration No. 2026/739337/07), is built with practical security controls appropriate for a South African SaaS and directory platform.
How we protect the platform
- HTTPS encryption in transit on xzono.com
- Hashed passwords (not stored in plain text)
- Login protections — failed-attempt lockouts and IP-based throttling to slow password guessing
- Client signup controls — account creation after email confirmation, with rate limits against registration spam
- Role-based access in the business portal
- Safe releases — live secrets and customer uploads are not shipped in public release packages
What we ask of you
- Use strong unique passwords
- Do not share staff logins
- Report suspicious activity promptly
Report a security concern
Email info@xzono.com with “Security” in the subject. Please do not publicly disclose vulnerabilities before we can respond.
Scope
This page describes practices we aim to follow. It is not a SOC 2 or ISO certification and not a guarantee against all attacks.