Home / MSPs

Protect every client. Keep the margin.

A multi-tenant DNS security platform built for managed service delivery — white-labeled under your brand, priced so reselling it is worth your time.

14-day trialNo per-device pricing50 tenants included on Growth
Acme IT Services · Tenants4 active
Riverside School12 IPs · SafeSearch on
● Healthy
Harbor Logistics8 IPs · 3 threats today
⚠ Threats
BlueSky Dental3 IPs · Custom policy
● Healthy
Northwind Legal5 IPs · Schedules on
● Healthy
Weekly summary emailed · 4 tenantsView in the live demo →
The platform

Onboard, monitor, prove value.

Designed for service delivery — multi-tenancy, white-label, and automation are built in, not bolted on.

Add a tenant in 60 seconds

Create the client, register their IPs, pick a policy profile. Point their router at DNSAFE.

tenant Harbor Logistics · 8 IPs

Watch every client at once

Health and threat alerts across all tenants, with drill-down to any client’s full query log.

alert 3 threats · Harbor Logistics

Report and renew

Per-tenant PDF reports and CSV exports on demand, plus a weekly summary email — proof of value your clients can read.

report harbor_2026-09.pdf ✓
Margin calculator

What DNSAFE is worth to your business.

Move the sliders to model your resale. Figures are estimates on the Growth plan.

50 clients included on Growth for one flat price, then $5 per extra client. No per-device fees.

Monthly revenue$500
DNSAFE cost$149
Monthly profit$351
Margin70%
Annual profit$4,212
Features

Everything MSPs need. Nothing they don’t.

🏢

Multi-tenant

Isolated logs, policies, and IPs per client — 50 included on Growth.

📶

Stops bandwidth-sharing apps All plans

Apps like Honeygain can’t rent out a client’s connection, and you’re told which network has one.

🎨

White-label Growth+

Your domain, logo, and colors on the sign-in page and the block page your clients see.

📄

Client reports

Per-tenant PDF reports and CSV exports, on demand.

🎫

PSA tickets Enterprise

Threat spikes and offline clients open tickets in ConnectWise or Autotask automatically.

📡

SIEM streaming Growth+

Per-tenant or partner-wide to Splunk, Elastic, or syslog.

🔑

SAML SSO + Duo Enterprise

Your techs sign in with your IdP and MFA.

⚙️

REST API Growth+

Provision tenants and rules from your RMM or scripts.

🧱

Branded block page Growth+

Tell users why a site was blocked, under your brand, with a one-click access request.

🏷️

Your name on the DNS address All plans

Clients’ devices use acmeit.dns.dnsafe.net, not ours.

🌐

Exposure check per client Growth+

A weekly check of each client’s public IPs for open services. Ready-made proof of value for QBRs.

Partner plans

Simple monthly plans. Resell at any price.

Starter

Launch DNS security for your first clients.
$49/mo
5 tenants included · $10 each extra, up to 25
  • Per-tenant policies, IPs & groups
  • Core ThreatGrid blocking
  • Network PDF reports & CSV exports
  • 30-day log retention
  • White-label login & branding
  • PSA integrations
Start free trial
Most popular

Growth

White-label and automation for a growing book.
$149/mo
50 tenants included · $5 each extra
  • Everything in Starter
  • White-label domain & branding
  • REST API & SIEM streaming
  • Branded block page
  • 90-day log retention
Start free trial

Enterprise

Scale, integrations and single sign-on.
$399/mo
150 tenants included · $3 each extra
  • Everything in Growth
  • ConnectWise & Autotask tickets
  • Secure Wi-Fi included
  • SAML SSO & Duo MFA for techs
  • 1-year log retention
Talk to sales
14-day free trial · billed monthly
FAQ

Questions partners ask.

Will DNSAFE sell to my clients directly?

No. Clients you add belong to your account. We don’t market to them, and if one of them contacts us, we send them back to you. You set their price, and they never see a DNSAFE invoice.

How are extra clients billed?

Each plan includes a number of clients. Extra ones are added to your monthly bill automatically at your plan’s rate. Trials and complimentary accounts are never charged.

Can my clients see DNSAFE?

Not if you don’t want them to. On Growth and Enterprise, the sign-in page, block page and reports carry your brand, and on every plan their devices can use your own DNS address.

How fast can I get a client protected?

Add the client, register their office IP, and point their router or firewall at DNSAFE. Most are filtering within a few minutes.

Guides

Learn more before you decide.

Add DNS security to every client this month.

Apply in two minutes. We review applications quickly, usually within a business day.