DNSAFE filters every lookup your devices make — blocking malware, phishing, and ads for the whole house. Change two numbers in your router. That's it.
3.12.124.913.11.62.44dns.dnsafe.netTHREATDNS Free threat check for any domain, IP or email: 10 security sources in one report.
Try it ↓Before any website, app, or malware payload loads, your device asks DNS where to go. DNSAFE answers that question — and refuses to give directions to anything dangerous.
Set your router, firewall, or device to DNSAFE's resolver. No agents, no hardware, no browser extensions.
Pick categories to block, add allow/block rules, schedule filters, and enforce SafeSearch — per network, group, or device.
Live query logs, threat alerts, and PDF reports and CSV exports. Stream to your SIEM or open PSA tickets automatically.
The same ThreatGrid resolver protects a family's Wi-Fi, a 100-person office, and an MSP's entire client base.
Onboard a client in two minutes, set their policy once, and let DNSAFE do the rest — while your logo is on the login and block pages they see.
14 days free, no card, and you’re in straight away. Or explore a real partner account in the demo, read-only.
Run any domain through ThreatGrid's reputation checks — the same intelligence that powers every DNSAFE resolver.
10 sources in one report: VirusTotal, Google Safe Browsing, URLhaus, AbuseIPDB, domain age, certificates and breach data. Free, by DNSAFE. Opens threatdns.com.
Continuously updated feeds of malware, phishing, and C2 infrastructure.
DNS-over-HTTPS and DNS-over-TLS encrypt lookups so they can’t be read or tampered with.
Allow or block categories by day and time — homework hours, work hours.
Force safe results on Google, Bing, and YouTube without breaking Gmail.
An encrypted VPN for café, hotel and airport Wi-Fi that keeps your DNSAFE protection on.
Webhook, Splunk HEC, Elastic, or syslog — every decision, in real time.
Client-ready threat summaries with top blocks, categories, and trends.
Automate tenants, rules, and reporting from your own tools.
No. DNSAFE works by changing the DNS server on your router, firewall, or device. Every device behind it is protected immediately — phones, TVs, consoles, and IoT included.
Policy decisions happen in memory in under 5 ms, and DNS is answered from the resolver closest to you, so browsing feels the same as before.
Yes. Add a rule for any domain and choose the days and hours it applies, per network, IP group, or individual device.
Not if you don't want them to. White-label lets you serve the portal login from your own domain with your logo and colors, and your brand appears on the block page.
Set both addresses in your router: 3.12.124.91 (US) and 3.11.62.44 (London). If one doesn’t answer, your devices use the other automatically, with the same filtering and your rules. Encrypted DNS (dns.dnsafe.net) answers from the closest of our three regions. Live status is at status.dnsafe.net.
We keep a list of the sites your network looks up so you can see what was blocked, for as long as your plan says: from 7 days on Free Home up to 1 year on Enterprise plans. Then it’s deleted automatically. Only your account (and your IT provider, if they manage your network) can see it. We never sell it or use it for advertising. Details are in our Privacy Policy.
Start free in under two minutes — no credit card, no software.
Business or MSP? Start a 14-day trial · Start a partner trial