Trust Rail: Free Security Scanning for Aqaba Businesses
By Yousof Almalkawi, Founder
Trust Rail: Free Security Scanning for Aqaba Businesses
A business can spend years building a reputation and lose it in 48 hours because an attacker spoofed their email domain. For most small and medium businesses in Aqaba — and across Jordan — the gap between "has a website" and "has a secure website" is invisible until something goes wrong.
Trust Rail closes that gap. It is a free security scanner for any business with a domain. Paste your domain, get a report in under 60 seconds.
What Trust Rail Checks
Trust Rail runs five technical checks that cover the most common attack vectors against business domains:
DNS Health
Your DNS records are the address book of the internet. If they are misconfigured — dangling subdomains pointing to services you no longer use, missing CAA records that allow unauthorized certificate issuance, exposed zone transfers — attackers can exploit them in ways that are invisible to you until the damage is done.
Trust Rail checks DNS configuration against a set of security baselines: CAA records, DNSSEC status, subdomain enumeration exposure, and dangling record detection. A failing grade on DNS health does not mean your site is compromised — it means the configuration creates exploitable surface area.
SSL/TLS Certificate
HTTPS is a basic requirement for any business website in 2026. But HTTPS is not binary — a certificate that is expired, misconfigured, or signed by a weak algorithm creates real risk even though the browser shows a padlock.
Trust Rail checks certificate validity, expiration date, cipher suite strength, and certificate chain completeness. A certificate expiring in 15 days is a business continuity risk. A certificate using deprecated SHA-1 signatures is a security risk. Both show up in the scan.
SPF (Sender Policy Framework)
SPF is a DNS record that tells receiving mail servers which servers are authorized to send email on behalf of your domain. Without SPF, any server on the internet can send email claiming to be from your domain. With a misconfigured SPF record, legitimate email may be marked as spam.
For a business in Aqaba sending invoices, proposals, and client communications by email, an SPF misconfiguration means clients may never receive your emails — or worse, they receive fake emails that appear to come from you.