OPERATIONAL PRINCIPLES · ZERO-PASSWORD PROTOCOL

Clear checks for the domain your business uses every day.

See what your email and website publish, understand the limits of the finding, and decide what should be fixed with your IT provider.

PRINCIPLE 01

Start with what your domain publishes.

SPF, DKIM, and DMARC help participating mail systems check whether a message aligns with your approved services. They can reduce direct spoofing of your exact domain. They do not stop lookalike domains, compromised accounts, fake display names, or social engineering.

PRINCIPLE 02

No mailbox password for the public check.

The initial check only reads public records and your root website response. During setup, your DNS administrator or IT provider can publish approved changes directly, or use a least-privileged access method that fits your process.

PRINCIPLE 03

You own everything we build.

Shield Setup is a flat, one-time engagement. You receive the final records, checks, decisions, and open items in a dated Shield Record. Optional managed review is separate and can be canceled at any time.

PRINCIPLE 04

Direct founder accountability.

Kova Shield is led by Alphonzo Cirton as part of Kova OS. You receive a named owner, written approval points, and a dated handoff instead of an unexplained score.

Have questions about your domain's setup?

Reach out directly to discuss your email architecture or start your public domain check.