Skip to content
02ToolArohan concept work

Demonstrates Security & protection

Security, demystified

Two modules. An anatomy of a secure site, with clickable layers for DNS, SSL/TLS, hosting, security headers and backups, each explaining in plain English what it is and what a problem looks like. Then what happens to a week of traffic arriving at a form, and what is left when the honeypot, the challenge and the download check are switched off one at a time.

01

DNS and domain

Where your name points
What it is
The address book entry that tells the internet where your website and email live. It is controlled at the registrar, the company you bought the domain from.
Why it matters
If the records are wrong, stale or owned by someone else, visitors and email go nowhere, or somewhere you do not control. Everything else sits on top of this.
What a problem looks like
Your emails land in spam because the records that prove they are really from you were never set. A subdomain still points at a service you cancelled years ago. The registrar login belongs to a contractor you no longer speak to.

What an Arohan audit checks here

  • Who owns the registrar account, and is the domain locked against transfer
  • Nameservers and the A, AAAA and CNAME records that point to the site
  • MX, SPF, DKIM and DMARC records for email that arrives and is trusted
  • Old or dangling records that point at nothing, or at someone else

Do you know this is handled for your site?

What you are doing

Click through the same layers a real Arohan audit checks, in the same order. Then switch off the defences on this site's own forms and watch what reaches the inbox.

This is a demonstration. The real thing is built for you.