Security at Goa Tour N Travel
How we protect your data, your money and your account.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. Payment data is tokenised at our PCI-compliant gateway — we never see your full card number.
Account protection
Two-factor authentication via OTP, login alerts on new devices, and password hashing with Argon2.
Continuous monitoring
24×7 anomaly detection, rate limiting on sensitive endpoints, and bot-defence against credential stuffing.
Independent audits
Annual third-party penetration tests and SOC 2 Type II controls. Reports available to enterprise customers on request.
Responsible disclosure
Found a vulnerability? We’d love to hear from you. We respond to all genuine reports within 48 hours and recognise contributors who help us keep travellers safe. No legal action will be taken against good-faith researchers who follow our policy.
Report a security issueNeed a hand?
Our 24×7 travel support team is one click away.