Spectra external diagnostics

See what customers, attackers, search engines and AI assistants can observe before committing to deeper investigation or remediation.

See the sector tear-down Request an assessment
Outside-in evidence

What Spectra examines

Spectra is passive and read-only. It gives decision-makers a practical view of public-facing risk without requiring credentials, production access or customer data.

Access

Accessibility

Whether people can read, navigate and complete important tasks using different devices and assistive technologies.

Trust

Customer safety

Public signals that affect impersonation risk, email trust and a customer's confidence that they are dealing with the real organisation.

Performance

Website speed

Whether pages become useful quickly enough to keep customers moving towards an enquiry or application.

Discovery

AI search visibility

Whether AI assistants can find, understand and accurately describe the organisation when customers ask ordinary questions.

Search

Web search visibility

Whether page structure, metadata and working routes give search engines clear, distinct and indexable content.

Mobile

Phone experience

Whether customers can read, navigate and progress without clipped content, awkward controls or avoidable friction.

Spectra sector tear-down

Twenty NZ non-bank lenders, read from the outside

We assessed the public websites of twenty New Zealand non-bank lenders in July 2026, looking only at what any customer or AI assistant could publicly see. No firm is named.

20/20 Every lender assessed was exposed on at least four of the six things their customers feel first.
20 of 20

Accessibility

Parts of the site were difficult or impossible for some people to read or use.

19 of 20

Customer safety and trust

Basic website and email protections were missing.

19 of 20

Website speed

Many pages were slow to load in the web browser.

17 of 20

AI search visibility

Lenders were missing from AI answers, gave AI nothing clear to read, or were met by a damaging answer.

14 of 20

Web searches

Basic SEO was missing, including unlabelled or duplicate pages and routes leading nowhere.

11 of 20

Mobile experience

Pages were not fully adapted for use on a phone.

Method note: We did not log in or probe. Where a measurement did not complete, that firm was counted as passing.

A controlled first step

How a Spectra assessment works

01

Read from the outside

We assess the agreed public-facing evidence without logging in, probing private systems or touching production data.

02

Separate evidence from assumption

Findings are documented in plain language, with the business or customer consequence made clear.

03

Decide what deserves attention

The evidence supports a proportionate next step: fix the public issue, investigate further or leave it alone.

Frequently asked questions

What is Spectra?

Spectra is Dark Arts' external diagnostic. It assesses the public-facing evidence available to customers, attackers, search engines and AI assistants, then identifies where a website or system has aged, drifted or become exposed.

Does Spectra require access to production systems?

No. Spectra starts from the outside and does not require production access, credentials or customer data.

Is Spectra a penetration test?

No. Spectra is a passive external diagnostic, not a penetration test. We do not log in, exploit vulnerabilities or probe private systems as part of this assessment.

What does Spectra assess?

The scope can include accessibility, customer safety and trust, website performance, AI search visibility, conventional search visibility and mobile experience.

Can an organisation request its own Spectra assessment?

Yes. Dark Arts can provide an organisation with its own evidence-based external assessment and explain which findings deserve attention first.

Book a Meeting