Transparency

Trust, but verify. Here is how.

A cyber-security company should be able to prove what it claims about its own website. This page measures your connection in your browser, checks the integrity of the files you just loaded, and lists exactly what the site does and does not do.

ScriptsOnly this site's own, no third parties
CookiesNone for tracking; one language preference
HostingPrivate storage behind a content delivery network, TLS 1.2 or newer
Your connection, measured now

Nothing below is static text. Each value is read from your browser at the moment this page opened.

Transportmeasuring…
Edge locationmeasuring…
Edge cachemeasuring…
Security headersmeasuring…
Offline modemeasuring…
Display modemeasuring…
Networkmeasuring…
Transferred for this pagemeasuring…
Buildmeasuring…
Build seal

Every stylesheet and script is sealed with its SHA-256 hash when the site is built. Your browser has now recomputed the hashes of the files it loaded and compared them.

  • /assets/site.4c744e5436.jscomputing…
  • /assets/site.5c6ff65675.csscomputing…

What this site does and does not do

01

No analytics, no pixels, no social plug-ins

The only requests your browser makes go to this site and, unless the fonts are self-hosted, to the font service.

02

No tracking cookies

A single preference (your language) may be stored so the site opens in it next time. The offline mode caches pages in your browser; clear it any time.

03

Strict Content-Security-Policy

Scripts load only from this site; inline scripts and styles are refused by the browser; the page cannot be framed by other sites.

04

Encrypted and pinned

TLS 1.2 or newer with HSTS preload. A CAA record limits who may issue certificates for this domain.

05

Private origin

Files live in private storage that only the content delivery network can read; there is no server to break into.

06

Reproducible builds

The build identifier in the footer is a hash of every source file. The same sources always produce the same site.

Open on your phone

Scan to open sparksoftware.qa in your language. Add it to the home screen to install the app; it keeps working offline.

Found something?

Write to security@sparksoftware.qa. Scope and expectations are in security.txt. We do not pursue good-faith researchers who respect it.