- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
DNSFilter
Protective DNS priced in public, from $1.00 a licence a month— DNSFilter’s threat and content filtering for networks and roaming devices, its plans and add-ons, and what India buyers must check. This hub covers one DNSFilter product.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
One intel page. Protective DNS, content filtering and roaming clients.
DNSFilter sells one business product — the linked card is a full intel page covering the Core, Plus and Enterprise plans, the roaming clients, DNS PreCheck, CyberSight and every paid add-on.
SecureTransit
Platform & engineA $2.00-a-licence-a-month add-on on Plus and Enterprise that wraps Windows Roaming Client traffic in a WireGuard or IKEv2 tunnel, sold only on sales-managed accounts. DNSFilter’s help centre says it is not a full VPN product, so it is covered on the DNSFilter page
Zorus
Platform & engineAn endpoint web-filtering and user-behaviour company from Tampa, acquired on 7 April 2025. Its ideas now ship inside DNSFilter as DNS PreCheck and CyberSight; zorustech.com still serves the legacy base, which moves once the DNSFilter agent reaches parity
Guardian
Platform & engineA firewall and VPN privacy app for home and family on iOS, macOS, Android, Windows and FireOS, up to six devices a subscription, acquired in 2022. A consumer app, not a business product, so it fits no TechBag guide
Webshrinker
Platform & engineThe website categorisation engine DNSFilter bought in 2018 and the source of its content categories. TechBag found no current standalone price, so it is treated as the engine behind DNSFilter, not a product to buy
OEM programme
Platform & engineDNSFilter licenses its filtering for other companies to embed, and says it protects millions of consumer devices this way, Amazon’s eero among them. N-able DNS Filtering is built on DNSFilter technology under such a licence
MSP pricing
Platform & engineA separate scheme for managed service providers that starts at $150 a month with tiered plans and a monthly minimum spend. It is a way to buy the same product for many clients, covered on the DNSFilter page
DNSFilter sells 1 of the products TechBag carries in network security & SASE. The Network Security & SASE guide shows how the category splits and which part is yours. →
Why “a printed price” is the whole story
Most protective-DNS services in TechBag’s guide are quoted, sold through MSPs or bundled into a bigger platform. DNSFilter prints its price, $1.00 or $2.25 a licence a month, and opens a 14-day trial, so a small team can deploy it the same day. The trade-off is depth: it filters by domain, with no TLS inspection, proxy or CASB.
Anycast resolver network
DNSFilter documents more than 80 data centres and 200+ anycast servers; queries go to the nearest node, and no Indian city is named in that list.
DNS Relay
A forwarding resolver run as Docker, a binary or a VM, so policies can follow LAN subnets and internal domains still resolve on your own servers.
Roaming Clients and DNS PreCheck
Plus brings a client to all five platforms, Windows to Chrome; on Windows 3.0+, DNS PreCheck filters on the device and fails open by default.
Dashboard and Data Export
Policies, Insights reports and CyberSight sit in one console with SSO and MFA; query logs last 9 days unless the $0.25 Data Export add-on ships them out.
Start with what must be covered — networks, roaming devices or both — then choose Core or Plus.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Challenger, DNS Security Radar 2024
in version 2.0, dated 29 February 2024, placed just outside the Leaders circle; DNSFilter states no position for the newer v3 report
4.6 stars from 272 user reviews
as DNSFilter’s analyst page lists it, beside seasonal G2 badges; review-site awards, not an analyst ranking
Peer Insights “Customer First” badge
a vendor programme badge built on reviews; DNSFilter appears in no Gartner Magic Quadrant
“On the Radar” profile
Omdia profiles DNSFilter as security delivered through DNS with plans to widen filtering; a profile, not a ranking
4.8 out of 5 from user reviews
shown on DNSFilter’s own pages alongside its G2 badges, so read it as user sentiment rather than an assessment
Acquired Zorus
terms undisclosed; Zorus’s on-device filtering and behaviour analytics returned as DNS PreCheck and CyberSight
SOC 2 certified
the badge DNSFilter shows on its product page; ask for the current report during procurement
No CVEs found in NVD
an NVD keyword search for DNSFilter and Zorus returned no entries on 2 October 2026; no vendor advisory page was found either
The company in six figures
See the platform, hear the pitch
DNSFilter: A Protective DNS That Stays One Step Ahead
A February 2025 short on how DNSFilter blocks threats at the DNS layer before a connection is made.
DNSFilter: Making the Internet Safer for All
An August 2024 brand film on the company’s mission; a pitch, not a product demo.
Zorus to DNSFilter with Brett Cheloff
A June 2025 webinar in which the former Zorus CEO, now Chief Product Officer, walks through folding Zorus into DNSFilter.
Where DNSFilter sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
DNSFilter Across Its Solution Areas
Each dot is a DNSFilter solution area: competitive position vs category momentum.
The core job: point a router, firewall or DHCP at the anycast resolvers, from $1.00 a licence a month on Core.
Price Transparency × Inspection Depth
How much of each vendor’s price you can read before talking to sales vs how far its web control goes beyond the DNS layer.
Two plans priced in public with a 14-day trial; filtering stops at the DNS layer, with no TLS inspection, proxy or CASB.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with DNSFilter?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What has to be filtered?
2. What must you see in the reports?
3. What will procurement ask for?
One product, three plans
DNSFilter sells one protective-DNS service. Core, Plus and Enterprise are plans of it, and the add-ons sit on top of those plans.
Read →Core or Plus?
Core filters networks and relays only. Laptops that leave the office need Plus, which brings the roaming clients and per-user policy.
Read →What a licence is
Each roaming device takes one licence; a network takes one for every 10,000 DNS queries a day, which DNSFilter estimates for you.
Read →Names that changed
The Pro plan was retired in favour of Plus, and the Zorus agent is being replaced by DNS PreCheck and CyberSight inside DNSFilter.
Read →Logs and CERT-In
Query logs last 9 days. Keeping 180 days for CERT-In means paying for Data Export and landing the logs in a SIEM or S3.
Read →Where DNSFilter fits
The Network Security & SASE category’s Secure Web & DNS guide compares DNS filters with web gateways and SSE web controls, the market DNSFilter sells into.
Read →The acronym decoder
Every term on these pages, in one place- Protective DNS
- A resolver that refuses to answer for malicious or blocked domains, stopping the connection.
- Anycast
- One IP address served from many sites, so each query reaches the nearest resolver.
- DNS Relay
- DNSFilter’s local forwarder that applies site and subnet policy and keeps internal names.
- Roaming Client
- DNSFilter’s device agent that keeps filtering on when a laptop or phone leaves the office.
- DNS PreCheck
- On-device filtering in the Windows Roaming Client 3.0+, via a transparent proxy.
- CyberSight
- DNSFilter’s user behaviour analytics, fed by the Windows client, with an AI usage report.
- AppAware
- DNSFilter’s blocking of named SaaS apps, more than 400 of them, by their domains.
- DoH
- DNS over HTTPS: encrypted DNS inside a browser, which can bypass a network DNS filter.
- DoT
- DNS over TLS: the encrypted channel DNSFilter’s clients and relays use to reach it.
- DNSSEC
- Signed DNS records that let a resolver prove an answer was not tampered with.
- Fail-open
- If filtering breaks, traffic flows unfiltered; fail-closed blocks it instead.
- Licence (DNSFilter)
- One roaming device, or 10,000 DNS queries a day on a network deployment.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Split networks from devices
List the sites you will point at DNSFilter and the laptops and phones that roam. Sites are counted by query volume, and devices one by one.
Pick Core or Plus
If any device leaves the network, or reports must name people, you need Plus at $2.25; Core at $1.00 covers networks and relays alone.
Price the add-ons you need
Data Export at $0.25 a licence a month for SIEM or S3, SecureTransit at $2.00 for a Windows tunnel, and Premium Support, which is quoted.
Plan the log trail
Query logs last 9 days. For CERT-In’s 180, send them through Data Export to Splunk, Sentinel, QRadar or S3, and set retention there.
Close the DoH gap
Firefox turns its own encrypted DNS off for DNSFilter; other browsers need known DoH providers blocked at the firewall before you go live.
Get it priced in rupees
DNSFilter publishes USD prices only and names no Indian partner. TechBag counts the licences, adds the add-ons and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Core | Per licence a month, billed yearly · networks and DNS Relay only, no roaming clients | $1.00 ($240 a year minimum) | Office networks |
| Plus | Per licence a month, billed yearly · adds roaming clients, DNS PreCheck, CyberSight and identity | $2.25 ($750 a year minimum) | Hybrid workforces |
| Enterprise | Quoted · same feature set as Plus · custom licensing offered above 500 endpoints | Quote | Large estates |
| MSP | Tiered plans with a monthly minimum spend, managed per client | From $150 a month | Managed service providers |
| Education | Counted by total students and staff, billed yearly | Quote | Schools and colleges |
| SecureTransit | Add-on on Plus and Enterprise · Windows tunnel, sales-managed accounts only | $2.00 a licence a month | Untrusted Wi-Fi |
| Data Export | Add-on on every plan · streams logs to Splunk, Sentinel, QRadar or S3 | $0.25 a licence a month | Log retention |
| Premium Support | Add-on · prioritised cases, faster response targets, two calls a month | Quote | Faster escalation |
DNSFilter prints its prices in USD: Core $1.00 and Plus $2.25 a licence a month billed yearly, where a licence is one roaming device or 10,000 network DNS queries a day. Enterprise and Education are quoted, MSP plans start at $150 a month, and add-ons are extra. TechBag gets the total itemised in INR with GST.
Five pitfalls that cost buyers quarters
Buying Core for laptops
Core has no roaming client, so devices off the network go unfiltered. Roaming, DNS PreCheck and CyberSight all start at Plus.
Counting licences by people
DNSFilter counts roaming devices and network query volume, never people. Someone with a laptop and a phone takes two.
Stopping at 9 days of logs
Query logs last 9 days on every plan. CERT-In expects 180, so budget the Data Export add-on and a SIEM or S3 bucket to hold them.
Assuming DoH is handled
DNSFilter switches off encrypted DNS in Firefox only. Chrome, Edge and other browsers may still use DoH unless the firewall blocks its providers.
Expecting web inspection
DNSFilter decides by domain. It does not decrypt TLS, run a web proxy or act as a CASB; buy a web gateway if you need those.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers want to see who uses which apps and AI tools, not only which domains were blocked — which is why DNSFilter folded Zorus’s behaviour analytics in as CyberSight.
Filtering moves onto the device
DNSFilter bought Zorus in April 2025 and now filters on Windows devices through DNS PreCheck, without changing DNS settings.
What it means for you
Ask whether a DNS filter still works when users change resolvers.
Watching AI tool use
CyberSight’s AI usage report records which AI apps people use, from the Windows Roaming Client, with up to a year of history.
What it means for you
Decide who may see per-person activity before you switch it on.
Encrypted DNS in browsers
DNSFilter turns off Firefox’s DoH with its canary domain, but other browsers need DoH providers blocked at the firewall.
What it means for you
Test every browser your staff use, not just one.
Protective DNS through partners
DNSFilter counts 6,000+ MSP partners and licenses its engine to others, N-able among them.
What it means for you
Check whose engine sits behind the DNS filter your MSP sells.
Questions buyers ask about DNSFilter
Ready to shortlist DNSFilter?
Open the intel page for the deep dive, or let a TechBag advisor build the case with you — the networks and devices to license, Core or Plus, and the log trail CERT-In expects, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.