Republic of Kenya
LOG IN / REGISTER

Protecting Kenya’s Digital Trust and Sovereignty

A centralized, government-wide approach to securing official domains and email systems against spoofing, phishing, service disruption, and cyber fraud.


REGISTER NOW!

Why Domain & Email Security Matters

Government domains and email systems are constantly targeted by automated bots, cybercriminals, and fraudsters seeking to:

  • • Impersonate government institutions
  • • Steal credentials and sensitive data
  • • Disrupt public digital services
  • • Defraud citizens, suppliers, and staff

A strong, shared security baseline significantly reduces incidents, lowers response costs, and protects public trust.

Email Authentication & Anti-Spoofing

  • • DMARC – Prevents domain impersonation and fraud
  • • SPF & DKIM – Ensures only authorized systems send emails
  • • BIMI – Enables verified government branding in inboxes
  • • MTA-STS & TLS-RPT – Enforces encrypted delivery

Government emails become trusted, authenticated, and protected.

Domain Health & Visibility

Real-time dashboards provide:

  • • Domain authentication status
  • • Compliance levels across protocols
  • • Misconfigurations and security gaps

ICT teams identify risks early and maintain continuous compliance.

Threat Intelligence & Monitoring

  • • Origin of malicious traffic
  • • Unauthorized sending attempts
  • • Trends targeting government domains

Supporting proactive defence and evidence-based decisions.

Web & Domain Protection

  • • Web Application Firewall (WAF)
  • • DDoS Protection
  • • Bot & Scanner Mitigation
  • • Continuous Monitoring & Alerting

Attacks are blocked before they impact public services.

Benefits to Government and Citizens

For Government

  • • Reduced phishing incidents
  • • Protection of institutional reputation
  • • Lower recovery costs
  • • Centralized visibility

For Citizens & Partners

  • • Trusted communications
  • • Reduced exposure to fraud
  • • Greater confidence in digital services

Implementation Approach

1. Secure DNS and baseline authentication

2. Monitor legitimate email traffic

3. Enforce strong policies

4. Deploy encryption and advanced protections

5. Maintain continuous oversight

A Secure Digital Government

The Domain Security Programme is a cornerstone of Kenya’s digital government strategy— ensuring official domains and communications remain trusted, resilient, and secure.