# Smart360 Security: Login and Form Security | Smart360 > Smart360 Security protects login screens and forms against bot traffic: human verification on every login, and bot filtering with honeypot fields on forms. Source page: https://smart360.com.tr/en/smart360-security --- Security # Smart360 Security Smart360 Security is the security layer that protects login screens and forms across the Smart360 family against automated bot traffic. [See the products it protects](https://smart360.com.tr/en/ekosistem)[How does it work?](#nasil) - Human verification on web logins - Honeypot field on forms - Separate database per organization What it is ## What does Smart360 Security protect against? Protection doesn't get in the user's way: verification is usually completed in the background without any extra action. ### Password guessing attacks Automated password attempts on the sign-in screen do not reach the password check until human verification is complete. ### Fake form submissions Quote and contact forms are protected against automated submissions by human verification and a honeypot field. ### Form spam The invisible honeypot field in the contact form filters out submissions filled in by bots. Where it works ## Which screens does Smart360 Security cover? Smart360 Security is active at the user-facing entry points of the Smart360 family. A verification solved on another address is not considered valid on this page. Which screens does Smart360 Security cover? Screen | Protection | Smart360 organization dashboard sign-in | Human verification; the decision is made in the Smart360 Security service | Smart360 admin sign-in | Human verification; the decision is made in the Smart360 Security service | Quote form | Human verification and honeypot field | Contact form | Human verification and honeypot field | SmartMail and SmartFiles sign-in screens | The same human verification, with the same Smart360 Security look | How it works ## How is the verification decision made? For Smart360 dashboard sign-ins, the verification decision is made in a single central place: the Smart360 Security service. - The service returns the decision and, if needed, an explanation in Turkish to show to the user. - Secret verification keys are kept only in this central service; screens and products cannot access them. - The decision logic is built so that new check steps can be added without touching the screens. Screen Smart360 Security Decision Shared security across the family ## What other security layers does the Smart360 family have? Smart360 Security is the visible face of the family's shared security architecture. ### Separate database per organization Each organization's data is kept in its own separate database for each product; databases are never shared between organizations. ### Address-bound session SmartMail and SmartFiles sessions are bound to the organization address used to sign in; one organization's session is not valid on another organization's address. ### Single identity, central session management Active sessions are listed with device information and can be closed remotely; when the password changes, sessions on all devices are closed. [Details](https://smart360.com.tr/en/ekosistem) ### Encrypted mailbox passwords Mailbox passwords are generated by the system and stored encrypted with AES-256-GCM; they are not distributed to employees. [Details](https://smartmail.com.tr/en/paylasimli-kutu.html) ### Short-lived file links SmartFiles download and preview links expire within minutes; even if a link is forwarded, no permanent access is created. [Details](https://smartfiles.com.tr/en/onizleme.html) ### Five-layer attachment security Files attached to support tickets are checked on five layers: extension, content signature, size, storage key and download format. ### Central AI layer Products do not access AI services directly, but through Smart360's central layer; usage is charged against the organization's entitlement. [Details](https://smart360.com.tr/en/yapay-zeka) ### Separate operations session The platform's operations dashboard is opened with a session separate from customer accounts, and its sign-in is protected by human verification. Email security ## How is corporate email protected? Email protection is SmartMail's own security layer. - Every incoming email is verified against SPF, DKIM, DMARC and PTR records. - Lookalike domains, brand impersonation and misleading links are each assessed separately, and the result is written with its reasoning. - Emails below the trust threshold are quarantined. - Emails sent on behalf of the organization can optionally go through approval. [SmartMail email security](https://smartmail.com.tr/en/guvenlik.html)[Email approval workflow](https://smartmail.com.tr/en/gonderim-denetimi.html)[SmartFiles field-based permissions](https://smartfiles.com.tr/en/yetkilendirme.html) SmartMail **SPF** **DKIM** **DMARC** **PTR** ## See the products it protects Smart360 Security verifies that web sign-ins are made by humans, filters out bot submissions on forms with honeypot fields, and explains its decision to the user in plain language. [SmartMail](https://smartmail.com.tr/en/)[SmartFiles](https://smartfiles.com.tr/en/)[SmartOperator](https://smartoperator.com.tr/en/)[SmartPass](https://smartpass.com.tr)[SmartSales](https://smartsales.com.tr/en/)