Security in DΛREΛKT_ is not a feature. It is the architecture. From the infrastructure to the browser runtime, every layer is hardened, monitored, and auditable. No add-ons, no premium tiers, no exceptions.
Every site we host is protected by the same defence-in-depth posture, applied uniformly rather than sold as tiers.
The home page's proof row counts unsafe-inline and unsafe-eval directives in this page's own Content-Security-Policy header, read with a same-origin HEAD request at the moment you load it. 'wasm-unsafe-eval' does not count as unsafe-eval: the two are different tokens with different reach.
Read the header yourself: open your browser's network panel, reload this page, and inspect the Content-Security-Policy response header on the document request. script-src carries no unsafe-inline and no unsafe-eval; style-src is nonce-based.
The home page's proof row counts cross-origin entries in the Resource Timing buffer for that page load: fonts, scripts, styles, images, everything. Fonts, module code and page assets are all served from dareakt.com itself.
Read it yourself: open your browser's network panel, reload the page, and check the Domain column. No Google Fonts, no CDN, no third-party script host.
Dedicated, hardened infrastructure, not shared hosting. Every request is analysed, every threat is scored.
Real-Time Threat Detection
Detection runs on every request: fire-and-forget, zero added latency
Automatic Response
Three independent enforcement systems working together across layers
Brute Force Protection
Every login attempt, every API call: metered and controlled
File System Monitoring
If a file changes and it was not you, you will know within minutes
24/7 automated monitoring: you get notified before your users notice anything.
3-Minute Health Checks
If your site goes down at 3am, you know by 3:03am
Certificate Lifecycle Management
No expired certificates, no browser warnings, no lost trust
Real-Time Notifications
Monitor your infrastructure from your phone. No dashboard required
Security Grade Dashboard
One number that tells you exactly where you stand
Multi-layered authentication with modern standards. No shortcuts.
TOTP Authentication
Even if your password leaks, your account stays locked
JWT + Cookie Security
Sessions are scoped, secured, and server-verified on every request
The browser-runtime hardening layers, N0 through N20, each documented honestly: read the current state of every layer, including the ones not yet wired, at docs/security/hardening-N-series.md.
Evidence Chain · Immutable Audit Trail
Cryptographic proof of what happened, when, and in what order
Operation-Scoped Authorization
Every privileged action requires a fresh, scoped, single-use token
Outbound Request Control · not installed
The gate itself is a deliberate open question, not a live control. Read the honest state at docs/security/hardening-N-series.md § N6.
Content Security Policy
Read the CSP header yourself; do not take our word for it
Every site hosted on DΛREΛKT_ gets the full security stack. No tiers, no add-ons, no compromises. From the server to the browser, from the firewall to the evidence chain: security is the architecture.
This is not a feature list. This is how we build.
Hardened infrastructure. Real-time threat detection. A cryptographic evidence chain. Two-factor authentication. 21 hardening layers, N0 through N20, each one documented honestly, including the ones not yet wired. Every site. Every plan. Always.