Pricing
DNSFilter's published pricing is per license: Core starts at $1.00 per license per month on an annual plan, with a $23 monthly minimum, and Plus at $2.25 per license per month, with a $62.50 minimum. MSP pricing starts at $150 a month. Figures are from DNSFilter's pricing page as of September 30, 2026; check it for current prices.
DNSAFE charges per network, not per person or device:
| DNSAFE plan | Price | Covers |
|---|---|---|
| Business Starter | $19/month | Up to 25 registered public IPs |
| Business | $49/month | Up to 100 IPs, schedules, SIEM, API |
| Business Enterprise | $99/month | Unlimited IPs, SSO, Duo, branded block page |
| MSP Starter / Growth / Enterprise | $49 / $149 / $399 per month | 5 clients / unlimited / unlimited plus PSA and SSO |
Example: an office of 40 people with around 90 devices on one internet connection. Per-license pricing depends on how licenses are counted, often per user or per device. On DNSAFE it's one IP on Business Starter at $19/month however many devices connect.
Features side by side
| Feature | DNSFilter | DNSAFE |
|---|---|---|
| Threat and phishing blocking | Yes | Yes |
| Content categories | Yes | Yes |
| Network deployment (router, firewall) | Yes | Yes |
| Laptops and phones away from the office | Yes, with a roaming agent (Windows, macOS, mobile) | Yes, with per-device encrypted DNS (no agent) |
| Encrypted DNS (DoH / DoT) | Yes | Yes |
| SIEM streaming | Paid add-on | Included on Business, Growth and Enterprise |
| PSA integration | Yes | ConnectWise and Autotask on MSP Enterprise |
| SSO | Yes | SAML SSO on Enterprise plans |
| Query log retention | 9 days on standard plans (90 days of reports) | 30 days, 90 days or 1 year by plan |
| Free trial | 14 days | 14 days, no card |
DNSFilter details are from its public pricing page on September 30, 2026. If anything here is out of date, let us know and we'll correct it.
Try DNSAFE on your own network: 14 days free, no card, set up in minutes.
Start free trialWhich one should you choose?
DNSFilter is the better fit if…
- you need a managed, tamper-resistant agent on every laptop and phone;
- you want policies per user or group from Entra ID or Active Directory; or
- you need features such as application blocking or user behavior analytics.
DNSAFE is the better fit if…
- you protect office, school or guest networks with many devices per person;
- you want predictable pricing that doesn't grow with headcount;
- you want long log retention and SIEM streaming without add-ons; or
- you're an MSP and want a flat partner price with white-label.
Frequently asked questions
Can I switch from DNSFilter to DNSAFE without downtime?
Yes. Recreate your allow and block lists, register each site's public IP, then change the DNS servers in DHCP (or your AD forwarders) one site at a time. Each site takes about 15 minutes.
Does DNSAFE have a roaming client?
Not as an agent. Each laptop or phone can get its own encrypted DNS setup from the portal, so your policy applies on any network. There’s nothing to install, which also means a user with admin rights can remove it. If you need a locked-down agent, DNSFilter has one.
Is DNSAFE cheaper than DNSFilter?
It depends on your size and shape. For offices with many devices per internet connection, per-network pricing is usually cheaper. For a few users spread across many locations, per-license pricing can cost less.