Domain hardening
DNSSEC signed. CAA records restricting certificate issuance. SPF, DKIM, and DMARC configured with strict policies. Registrar lock enabled.
Trust
Security is the product, not an upsell.
Every Arkana site launches with the same security baseline — regardless of tier. The cybersecurity approach isn't premium. It's the floor.
Transport & headers
TLS 1.3 only. HSTS with a two-year max-age. Strict Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy on every response.
Edge protection
Cloudflare DDoS mitigation, bot management, and WAF rules tuned for the site's threat model. Rate limits on forms and auth endpoints.
Authentication
Any login uses passkeys or TOTP-based 2FA by default. Password-only auth is never used. Session cookies are HTTP-only, Secure, and SameSite=Lax.
Backups & recovery
Automated daily backups with 30-day retention (90 days on Business+). Restore drills run quarterly. Runbook documented for domain, hosting, and email recovery.
Monitoring
Uptime, TLS expiry, DNS drift, and performance regressions monitored continuously. Alerts route to a human, not a queue. Incidents documented with post-mortems.
Policies
Clear promises, in writing.
Every engagement is covered by a plain-language Master Services Agreement. Below are the commitments in short form.
Data ownership
You own everything: your domain, your hosting, your content, your code. We keep no proprietary lock-in. If you ever leave, we hand over full source and configs.
Data privacy
We don't sell client data. We don't share it with third parties for marketing. We only collect what's needed to run the site and support the engagement.
Incident response
If your site is compromised, we disclose in writing within 24 hours, provide a remediation plan within 48 hours, and share a post-mortem within 7 days.
Uptime commitment
Care Standard: best-effort. Care Pro: 99.9% monthly uptime (43-minute allowance). Care Elite: 99.95% monthly uptime with pro-rated credits on breach.
Payment & refunds
Build fees: 50% to start design, 50% at launch. Care plans: month-to-month, cancel anytime with 15 days' notice. Unused portions of prepaid work are refunded pro-rata.
Confidentiality
Anything shared in a discovery call, workshop, or working session stays between us. A mutual NDA is available on request at no cost.