ControlD

Control D is a DNS filtering service blocking malicious and unwanted destinations at the name resolution layer, across every major operating system. It is built by engineers who previously ran a large consumer DNS network, and it publishes a self serve per endpoint rate rather than quoting.

Filtering at the DNS layer is a deliberately simple idea that works because of where it sits. Almost every connection begins with a name lookup, so refusing to resolve a known malicious destination stops the connection before it is made, without inspecting traffic or installing anything in its path. It applies to every device and every application uniformly, which endpoint software cannot claim.

The published block rate, 99.98 percent measured by a third party in 2025, is the number the product is sold on. It should be read as a vendor cited figure, though DNS blocking is unusually measurable compared with most security claims, since a destination either resolves or it does not.

Self serve deployment with a per endpoint monthly price makes this accessible to small organisations that cannot engage with enterprise security procurement, which is a genuine gap in this market. Larger deployments are handled through a partnership route with an uptime commitment.