99.98% block rate. Every OS.
DNS filtering built by engineers behind a 100M-user network. Blocks zero-day threats first. Deploy in minutes. Cancel anytime.
Trusted by engineering teams, MSPs, and universities worldwide
Five reasons teams switch and stay.
Highest block rate among the public resolvers Nexxwave tested. Real-time AI catches malicious domains before they hit a shared blocklist.
Every OS, no workarounds
Native clients for Mac, Windows, Linux, iOS, and Android. One policy across all of them.
Priced per endpoint
No minimums, no annual lock-in. SIEM streaming and API access on every plan.
Silent install and updates
Installs once and stays out of the way. Barry handles non-critical troubleshooting around the clock.
SOC 2 evidence, ready to export.
Built for the auditAuditors want a documented policy, proof the control is running, and logs that reach back far enough to investigate. Control D gives you one policy across every OS, 30-day query logs on every plan, and a year of analytics. DNSFilter's query log dashboard tops out at roughly 6 to 9 days depending on plan. When the auditor asks, you export the evidence instead of explaining why you can't.
The word ‘soon’ from other vendors usually means something between 6 months and never, but the features we asked about were ready to test fairly quickly. This was before we’d paid for any licenses, and we’d been clear we were still in a POC process.
Ian Winsemius · Staff Security Manager at GitHubDeploy today. Forget about it tomorrow.
Sign up.
No credit card required. No discovery call. No kickoff meeting.
Deploy.
Agent installs silently. Most customers go from sign-up to active filtering in minutes. Network-level deployment requires no agent at all.
Done.
Policies push without touching individual machines. Barry handles non-critical troubleshooting 24/7. Nobody gets paged for a DNS filtering issue.
Supports DNS-over-HTTPS/3, DNS-over-TLS, DNS-over-QUIC, and Legacy DNS. Encrypted by default.
Built for your environment
For IT & Security Teams
You’re doing SOC 2, managing laptops in 14 countries, and your engineering team runs Mac and Linux. Most DNS tools were built for Windows and bolted support on later. The gaps show up during audits.
Control D runs natively on every OS your team uses. One policy. 30-day query logs. Independent block rate. Your auditor gets what they need without you building it from scratch.
For MSPs
If you’ve spent a weekend fixing a DNS client after an update, you already know why MSPs switch. DNSFilter’s roaming client has a documented history of breaking on update and requiring manual remediation across client machines.
Control D installs silently, updates seamlessly and manages every client from one dashboard. Multi-tenant by design. Full API and CLI.
What the Pros Say
Works on mobile without any software. The redirection feature eliminated the need for VPNs for our company.
The best part isn’t the system, it’s the support. I’ve rarely worked with a technology partner so responsive and adaptable.
Provided filtering and web protection to our customers, especially those on a tight budget. Great product, great team.
I’d been on NextDNS Pro for years. Control D offers features NextDNS doesn’t, especially the service redirection feature.
Start today. No credit card. No kickoff call.
Most customers go from sign-up to active filtering in minutes. If something breaks, you’ve got quick support, not just a ticket queue.
SOC 2 Certified
ISO 27001 Certified
ISO 27701 Certified