Block malicious domains from dozens of threat intel feeds. Includes IP level feeds that block domains that are hosted on bad hosting providers.

Block malicious domains that don’t appear in any threat intel feed using machine learning. 3 aggressiveness levels to choose from.

Block or unblock over 850+ different services and create custom rules to finetune your browsing profiles or make exceptions.

Block or unblock over 850+ premade services with a single toggle switch.

Create geo-IP based rules for queries that resolve to IPs within a specific country.

All modern DNS protocols are supported: DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, DNS-over-HTTPS/3.

Legacy installations are supported for networks that can’t leverage modern Secure DNS protocols.

All DNS protocols are dual stack and support IPv4 and IPv6.

Optionally redirect domains, services or all browsing activity via proxies in 69 countries. No VPN required.

Onboard your administrators and end user using SSO.

Optional CLI and GUI based applications for Windows and Mac.

Optional setup helper apps for iOS and Android.

Open source single command installation DNS daemon supporting many popular router vendors and firmware.

Fully documented API access with ability to generate and invalidate own API tokens.

Audit trail of all admin actions within your Organization. Search and export data.

Real time and historical DNS query log.

Raw query data is stored for a period of time for review.

Low resolution Analytics data is stored for up to 1 year. Hourly granularity for last 1 month, and daily granularity for last year.

Choose where your Analytics data is stored, at a per-Organization level.

Dedicated storage regions are available in a location of your choice.

Stream raw query data into your SIEM (Splunk or MS Sentinel).

Talk to fellow users on Reddit, and Discord.

View extensive documentation and learn about the service.

Reach out to a fellow human and we’ll be happy to help you out with your unique issue.