Based on current platform development and user requests, the Domain Lock feature for Crezlo Virtual Tours is moving from a core security function toward a more robust enterprise-level tool.
The foundation of the feature focuses on basic protection and manual controls.
Manual Whitelisting: Ability to enter comma-separated domains (e.g., yourwebsite.com, realtor.ca) to restrict iFrame embeds.
Access Denial Screen: A security layer that prevents the tour from initializing if the referrer URL doesn't match the whitelist.
Toggle Control: Instant activation/deactivation via the "Share" menu in the tour editor.
This phase focuses on making the tool easier for agencies managing hundreds of tours.
Global Domain Settings: Set a "Master Whitelist" at the workspace level so you don't have to manually enter domains for every individual tour.
Wildcard Support: Ability to use symbols (e.g., *.agency.com) to automatically authorize all subdomains for large organizations.
Custom "Access Denied" Messaging: Allow users to customize the text or branding a viewer sees when a tour is blocked on an unauthorized site.
The long-term vision integrates security with marketing data.
Attempted Breach Alerts: Notifications in your dashboard when your tour embed code is used on an unauthorized domain (helping you identify potential leads or content thieves).
Dynamic Domain Locking: Integration with the Crezlo CRM to automatically lock tours to a client’s specific URL upon project completion.
Geo-Fencing: Combining Domain Locking with geographic restrictions (e.g., only allowing the tour to be viewed on your domain and within a specific country/region).