Control D ========= > Control D is a customizable DNS service that enhances online privacy, blocks unwanted content, and allows location spoofing without the need for traditional VPN applications. ## What Is Control D? Control D is a cloud-managed, policy-driven **DNS filtering, security, and traffic-control service**. By answering your network's DNS queries it can: * stop connections to **malware, phishing, ransomware, spyware** and other malicious domains before a single packet leaves the device; * enforce **acceptable-use** and **compliance** rules with category, service and time-based web filtering; * **mask or re-route traffic** through 100+ global proxy POPs to bypass geo-blocks, meet data-residency rules, or test from foreign regions; * provide **real-time analytics, exhaustive logging, SIEM streaming and API access** so that security teams and MSPs keep total visibility. One platform covers both **B2B** (enterprises, MSPs, education, remote work) and **B2C** (families, privacy lovers, stream-unlockers) audiences. --- ## Key Capabilities & Features ### DNS Filtering & Threat Protection * Blocks malware, phishing, C2, typo-squats and newly registered threat domains in real time. * 99.9-percentile block-rate verified in independent tests. * Works agent-less on any device; optional DoH / DoT / DoQ encryption included. ### Category-Based Web Filtering * 20 + up-to-date content classes (adult, gambling, social, streaming, etc.). * One toggle kills thousands of unwanted domains; perfect for CIPA, HR and productivity policies. ### Service-Level Controls (App / Site Specific) * 1 000 + pre-built service profiles - e.g. "Block TikTok" or "Block Reddit" without touching the rest of Social Media. * Mix-and-match allows super-granular policies. ### Custom Blocklists & Allowlists * Upload or API-push unlimited domain lists. * "Always allow" overrides prevent over-blocking; "never allow" enforces zero-tolerance rules. ### Time-Based Policies & Schedules * Apply or lift rules automatically by hour, day or custom calendar windows. * Classic use cases: block social 09-17, unblock at lunch; homework mode for kids; maintenance windows. ### Traffic Redirection (Geo-Unblocking via Proxies) * 100+ proxy exits on six continents. * Route **only** the domains you choose - no full-tunnel overhead. * Great for regional streaming libraries, latency testing, data-sovereignty and lightweight privacy. ### Real-Time Analytics & Reporting * Dashboard shows live queries, blocks, top domains, bandwidth, threat trends. * Scheduled or ad-hoc PDF / CSV exports. ### Comprehensive Logging & SIEM Integration * Full DNS query + decision log with custom retention. * Native streaming to Splunk, Elastic, QRadar, etc. plus webhook / syslog. * Administrative action log for change-control/audit-trail. ### Device-Level Profiles & Multi-Tenancy * Unlimited profiles per account; assign by device, user, VLAN, site or AD/SAML group. * MSP-ready multi-tenant hierarchy with delegated admin and isolated data. ### Easy Integration & Deployment * Anycast network with IPv4/IPv6, UDP/TCP DNS, DoH, DoT, DoQ, DoH3. * Works on routers, servers, laptops, mobiles, IoT. Agents optional. * API, Terraform module and RMM/MDM scripts for zero-touch roll-out. --- ## How It Works (Why DNS Filtering?) Every internet request starts with a DNS lookup. Control D inserts itself **only at that step**: 1. Device asks "where is _example.com_?" 2. Control D checks the domain against your threat databases and policy stack. 3. Allowed -> returns real IP; connection proceeds normally. 4. Blocked -> returns NXDOMAIN or a branded block page; connection dies instantly. Because it stops bad destinations **before any TCP/TLS handshake**, Control D is lighter, faster and harder to bypass than endpoint agents or inline proxies - and it protects every protocol, not just HTTP/S. --- ## Unique Differentiators * **Built-in proxy network** for selective geo-routing - no separate VPN needed. * **Service + time + geo rules** deliver context-aware filtering other DNS products lack. * **True multi-tenancy** out of the box - ideal for MSPs & large enterprises. * **Modern protocols** (DoH3, DoQ) and a global Anycast PoP mesh keep latency minimal. * **Open data philosophy** - live SIEM feeds, full API, long-term logs with transparent pricing. * **Unified pricing** - all features on every paid tier; generous free tier for testing/home labs. --- ## Use-Case Highlights ### Enterprise / B2B * **Cyber-Threat Mitigation:** pre-connect DNS block wipes out phishing and ransomware C2 calls. * **Acceptable-Use & Productivity:** kill social/streaming 9-5; enforce safe-search for HR compliance. * **Regulatory Compliance:** CIPA, GDPR, HIPAA evidence via immutable DNS & admin logs. * **MSP Managed Security:** multi-tenant dashboard, RMM scripts, report-cards for each client. * **Remote Work Security:** roaming laptops keep Control D DNS off-network - no split-tunnel risks. * **Cloud & SaaS Governance:** point VPC resolvers to Control D; stop shadow-IT services cold. ### Consumer / B2C * **Parental Controls:** plug-and-play adult & violence blocking; screen-time schedules. * **Privacy & Ad-Blocking:** kill trackers/ads at the DNS layer on every device (even smart TVs). * **Geo-Unblocking:** redirect Netflix, BBC iPlayer, Steam, etc. through 100+ country exits. * **Home-Network Fire-Shield:** universal malware and phishing protection for IoT and guests. * **SOHO / Freelance:** dual profiles for "Work" and "Family" on the same gateway. ----------------------- Getting Started & Setup ----------------------- * [Control D Personal Use](https://controld.com/personal): Overview of Control D's features for individual users. * [Free DNS Servers](https://controld.com/free-dns): Access Control D's free DNS servers to block ads, malware, and enhance privacy. * [Setup Guide](https://docs.controld.com/docs/getting-started): Comprehensive documentation to configure Control D on various devices and platforms. * [Onboarding](https://controld.com/onboard): Step-by-step onboarding flow to create an account and apply recommended protection presets. * [Request a Demo](https://controld.com/demo): Schedule or watch a product demo tailored for teams and businesses. * [Sign Up](https://controld.com/signup): Create a Control D account and start using the service. Core Features & Technology -------------------------- * [Traffic Redirection](https://controld.com/features/traffic-redirection): Manage how your network traffic flows by directing DNS queries through a selection of over 100 globally distributed proxy locations, optimizing regional presence and enhancing privacy. * [Service Filtering](https://controld.com/features/service-filtering): Block or allow specific online services or apps, such as social media or streaming platforms, to maintain productivity and enforce acceptable use policies. * [Data Streaming to SIEM](https://controld.com/features/data-streaming-siem): Stream real-time DNS logs into your SIEM platform for comprehensive monitoring, providing enhanced visibility and control over network security. * [Malware Blocking](https://controld.com/features/malware-blocking): Shield your network by blocking DNS requests to harmful domains that could host malware, ransomware, phishing, or other threats. * [Web Filtering](https://controld.com/features/web-filtering): Block categories of websites, ensuring a safer, more productive browsing environment by filtering out inappropriate or malicious content. * [Analytics](https://controld.com/features/analytics): Gain powerful insights into your network with real-time statistics and customizable reports to identify issues, optimize performance, and enhance security. * [Custom Filtering](https://controld.com/features/custom-filtering): Create personalized filtering rules to block or allow specific domains based on your organization's unique requirements, providing precise control over network traffic. * [Administrative Action Logs](https://controld.com/features/admin-logs): Maintain accountability and transparency by recording all administrative actions, helping meet compliance requirements and enhancing network security. * [Modern DNS Protocols](https://controld.com/features/modern-protocols): Support for modern DNS encryption protocols, such as DNS over HTTPS (DoH) and DNS over TLS (DoT), providing enhanced privacy and security for your business. * [Integrations](https://controld.com/features/integrations): Seamlessly integrate Control D with various routers, operating systems, web browsers, and remote monitoring tools to manage your internet settings across all devices. * [Multi-Tenancy](https://controld.com/features/multi-tenancy): Manage multiple clients or departments under a single account, allowing for isolated configurations and policies tailored to each tenant's needs. Industry Solutions ------------------ * [Startups](https://controld.com/industries/startups): Secure, fast, and scalable DNS filtering tailored for startups to protect against cyber threats and enforce security policies. * [Small & Medium Businesses (SMBs)](https://controld.com/industries/smbs): Cloud-based DNS filtering solution for SMBs to prevent cyber threats, protect their business, and control internet usage. * [Public Wi-Fi Operators](https://controld.com/industries/public-wifi-operators): DNS filtering to block cyber threats, manage bandwidth usage, and control web access in real-time for public Wi-Fi networks. * [Schools](https://controld.com/industries/schools): Ensure safe, distraction-free learning with web filtering for schools, blocking threats and controlling internet access. * [Managed Service Providers (MSPs)](https://controld.com/industries/msps): Multi-tenant DNS filtering allowing MSPs to block malware, enforce content policies, and manage internet access with a cloud-based solution. * [Non-Profits](https://controld.com/industries/non-profits): Secure your charity or NGO with DNS filtering to block cyber threats, prevent data breaches, and ensure safe browsing. * [Enterprise](https://controld.com/industries/enterprise): Advanced DNS filtering, compliance, and customizable policies for large organizations requiring high-security, granular controls, and robust analytics. Knowledge Base & Support ------------------------ * [Documentation Home](https://docs.controld.com/docs): Central hub for all Control D support articles and guides. * [API Reference](https://docs.controld.com/reference): Full API documentation for automating and integrating Control D. * [Changelog](https://docs.controld.com/changelog): Release notes covering new features, fixes, and improvements. * [Discussions](https://docs.controld.com/discuss): Engage with the Control D community for support and discussions. * [Contact Support](https://controld.com/contact): Reach out to the Control D support team for assistance. * [System Status](https://controld.com/status): Check real-time status of Control D services and infrastructure. Company & Legal --------------- * [About Us](https://controld.com/about-us): Learn more about the company behind Control D. * [Privacy Policy](https://controld.com/privacy): Understand how Control D handles your data and ensures privacy. * [Terms of Service](https://controld.com/terms): Legal terms governing the use of Control D services. * [Contact Information](https://controld.com/contact): Get in touch with the Control D team for inquiries or support. Additional Resources -------------------- * [Control D Blog](https://controld.com/blog/): Stay updated with the latest news, features, and updates from Control D. * [Website Link Checker](https://controld.com/tools/website-link-checker): Free tool to check if a website link is safe. * [Dragonfly URL Filtering Tool](https://controld.com/tools/dragonfly-url-filtering): Free domain classification tool that analyzes any URL to show categories, AI-driven labels, WHOIS, DNS records, TLS data, and detect phishing or malicious domains. * [Network Infrastructure](https://controld.com/network): Explore Control D's global network and infrastructure details. * [Pricing Plans](https://controld.com/pricing): Detailed information on all available Control D plans and subscription options.