Millions
of blocklist rules, checked on every query
IPv4 + IPv6
full parity, end to end
Primary + secondary
high availability with automatic sync
On-premises
your DNS data never leaves your network
Stops malware, phishing, ads and trackers for every device on your network — before a single connection is made.
Filtering, your own zones, encrypted DNS and high availability — managed from one clean web interface.
Malware, phishing, ads and trackers are blocked at DNS level for every device — laptops, phones, printers and IoT. Nothing to install on the devices. Works with AdGuard-style and hosts-format blocklists.
Social media, gaming, streaming and more — blocked by name, instead of hunting down every domain they use.
Block services or entire filter lists at set times — games on school nights, social media during working hours.
Give devices and groups their own rules and schedules, and enforce safe search where it matters.
A live globe shows where your network's DNS answers point — and traffic to entire countries can be blocked.
Answer lookups for malicious domains with a sinkhole address — infected devices stand out instead of reaching their command servers.
Authoritative local zones, rewrites and conditional forwarding for internal names. Existing zones can be imported.
Keeps your public IPv4 and IPv6 records current automatically — Cloudflare, DuckDNS, FreeDNS, any dyndns2 provider or your own zones.
DNS-over-HTTPS for your clients, and encrypted DNS-over-TLS or DNS-over-HTTPS to the upstream resolvers.
Run a primary and a secondary. Settings, filters and the zones you choose are synchronised automatically over a pinned, encrypted connection.
Admin and read-only roles, two-factor authentication and a complete audit log of every change.
API tokens, Prometheus metrics, CSV export of the query log, and automatic backups of configuration and zones.
Every answer is geolocated and drawn on a live globe. Unexpected destinations stand out immediately — and whole countries can be blocked.
Answered, served from cache, blocked by a filter or a schedule, answered by your own zones — every query is accounted for, over the last 24 hours, 7 or 30 days. Click any number to see the queries behind it.
One container image for every node — choose primary or secondary during setup. It runs on your own hardware or virtual machines, so your DNS data stays inside your network.
Only necessary cookies (form security, your language); visits are counted without cookies, with shortened IP addresses. With your permission we also use Google Ads to measure whether our ads lead to enquiries. Google then sets cookies and receives data about your visit. You can change your choice at any time under Privacy settings. Google Ads measurement is on. Privacy policy