Welcome to the RealWired Trust Center! This portal is designed to provide you with a clear and comprehensive understanding of our commitment to security, privacy, and operational excellence. At RealWired, we understand the critical importance of protecting your data and maintaining your trust. This overview will introduce you to our approach, highlighting the key pillars of our security program.
RealWired maintains a robust security posture, built on a foundation of well-defined policies and continuous monitoring. We have established comprehensive information security policies and a dedicated Data Protection Policy that outlines the procedures and technical measures we implement to safeguard the confidentiality, integrity, and availability of your data. Our commitment to data protection extends to specific areas such as access control, with a documented Access Control Policy, and the use of strong encryption, as detailed in our Encryption Policy. This policy mandates the use of cryptographic controls like AES-256 for data encryption keys, VPN keys, and website SSL certificates, ensuring end-to-end security.
To further demonstrate our dedication to security and reliability, RealWired has undergone independent third-party assessments. We have successfully completed a Type 2 SOC 2 examination for our SaaS Services System, covering the 2017 Trust Services Criteria for Common Criteria/Security and Availability. This examination, conducted by A-LIGN ASSURANCE, confirms that our controls were suitably designed and operating effectively throughout the period of August 1, 2025, to July 31, 2026.
Our operational practices are designed to ensure ongoing security and resilience. We utilize compliance automation software for continuous control monitoring, allowing us to identify, select, and continuously monitor our internal controls. We also maintain cybersecurity insurance to mitigate the financial impact of potential security incidents and business disruptions. Furthermore, RealWired is diligent in managing third-party risks. Our Vendor Management Policy establishes requirements for ensuring that all third-party service providers and vendors meet our stringent security standards. We obtain and review compliance reports and other evidence from critical vendors at least annually to monitor their adherence to industry frameworks, regulations, and our own requirements. This includes defining collaborative efforts and responsibilities with cloud service providers to ensure information security controls are effectively managed. We also ensure that our system components are secure and supported, replacing unsupported components or documenting risk mitigation strategies when necessary.
This Trust Center provides detailed information on each of these areas, offering transparency into our security practices and commitments. We invite you to explore the various sections to learn more about how RealWired protects your information.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Reports
We may provide security-related reports upon request.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
RealWired Trust Center Updates
Vulnerabilities & Remediation
On October 21, 2026, announcement of exposure of the SaaS services provided, regarding the disclosed critical PHP2Shell remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) was received.
All PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affected within RealWired's systems were patched to the fixed versions on October 21.
YouConnect: all production, dev and file browser servers are on PHP 8.2.35. Servers were rotated out of the load balancer one at a time, with no target 5xx errors. An automated job keeps any newly launched server patched.
Vendor Circle: production and dev are on PHP 8.3.36. The production change had no application code changes and no downtime, and each pod was verified for both the CLI and PHP-FPM.
Parachute: production and dev are on PHP 8.4.27.
On October 22, 2026, RealWired's development team re-verified every system directly from the live environment.
For Vendor Circle, we also reviewed the cluster, container images, email sending, application database and error logs for the seven days before the patch. We found no indicators of compromise.
As the advisory recommends, we have also disabled session.upload_progress on Vendor Circle and Parachute

