Your domain is attack surface, not a line item
A domain name carries your website, your email and often your sign-in. We register it, lock it, and keep its DNS correct — with email authentication properly set, because SPF, DKIM and DMARC all live in the same place.
The domain is the most common blind spot we see in small businesses: registered years ago by someone who has since left, paid on a personal credit card, with no transfer lock, and DNS records nobody can explain.
None of it is a problem until it is. A domain that expires takes the website and the email down together. A domain without a lock can be transferred by anyone who reaches the account. And DNS records left lying around — an old mail provider still authorized to send as you, say — hand an attacker precisely what they need to impersonate you.
We source and manage domains through OpenSRS, the platform run by Tucows, an accredited registrar in Toronto — the same model as our hardware and licensing: we handle the supply and the configuration, and you remain the registered owner.
The domain handled as a security asset
- Registrar lock. Transfer is blocked by default, so account access alone isn’t enough to move your domain.
- Auto-renewal. A platform feature, not a person on call — plus advance notice for renewals worth a decision.
- DNSSEC. Assessed then planned, because misconfigured DNSSEC makes a domain unreachable.
- Email authentication. SPF, DKIM and DMARC configured and verified — neither too permissive, nor so strict they reject your own mail.
- DNS inventory. We document what exists before changing anything, including the legacy records nobody claims any more.
- Clear ownership. The domain is registered to your organization — not to us, and not to an employee.
DNS is also where half of email security actually happens. If you’re planning to harden Microsoft 365, the two pieces of work overlap naturally.
Frequently asked questions
Are you a domain registrar?
No, and the distinction matters. We are a reseller through OpenSRS, the platform run by Tucows — an accredited registrar based in Toronto. In practice that means your domains are registered and renewed on established Canadian infrastructure, while we handle the configuration, the locks and the monitoring. We don’t claim an accreditation we don’t hold.
Why buy a domain from a security firm instead of the cheapest registrar?
Because the price of the domain isn’t the risk. A domain is your organization’s identity online: it carries your website, your email, and often your sign-in. A domain that lapses by accident, a missing transfer lock, or neglected DNS records cause outages and hijacks that nobody notices until it’s too late. We treat the domain as what it is — attack surface — rather than an annual line item.
What is DNSSEC, and do we need it?
DNSSEC cryptographically signs your DNS answers so an attacker can’t inject forged ones and redirect your visitors or your email to a server of their choosing. It isn’t mandatory for every organization, but it’s inexpensive to switch on and it closes an entire category of attack. We assess it case by case: misconfigured DNSSEC can make a domain unreachable, so it gets planned rather than flipped on.
Can you take over domains we already hold elsewhere?
Yes. A domain transfer is a cold move: the name keeps working throughout, provided the DNS records are reproduced before the transfer rather than after. That is exactly the step people skip when they move a domain without a plan, and it’s what takes a website or a mail flow down for hours. We inventory your current records first, then transfer.
Do you handle our email authentication too?
Yes — and it’s one of the genuine arguments for keeping the domain and the security with the same provider, because SPF, DKIM and DMARC all live in DNS. Set too loosely, they let anyone spoof your domain in a phishing email; set too strictly without the required records, they cause your own legitimate mail to be rejected outright. We configure and verify them rather than guessing.
Is renewal automatic?
Yes. Auto-renewal is a platform feature and runs continuously — a system renews the domain, not a person on call. We also flag renewals worth an actual decision ahead of time, such as a defensive domain you may no longer want to pay for.
Who actually holds your domain?
If answering that takes an investigation, it’s already worth a conversation. We inventory first, then fix.
Get in touch