Advisor
Network Security
Domains Network Security DNS Security
DNS Security
DNS Security refers to technologies and practices designed to protect the Domain Name System (DNS) infrastructure from threats.
DNS Security refers to technologies and practices designed to protect the Domain Name System (DNS) infrastructure from threats such as spoofing, cache poisoning, tunneling, and denial-of-service attacks. DNS Security solutions monitor, filter, and analyze DNS traffic to detect malicious activity, enforce security policies, and ensure the integrity and availability of DNS services. Core capabilities include real-time threat detection, blocking of malicious domains, prevention of data exfiltration via DNS channels, and protection against DNS-based attacks. These solutions may also provide logging, analytics, and integration with broader security information and event management (SIEM) systems to support incident response and compliance requirements. DNS Security is typically used by network security teams, IT administrators, and managed security service providers responsible for safeguarding enterprise networks. Organizations deploy these solutions to reduce the attack surface, prevent access to harmful domains, and maintain reliable network operations. Unlike general network security tools, DNS Security specifically focuses on the DNS layer, providing visibility and control that complements firewalls, intrusion detection systems, and endpoint security platforms. Cyberin serves as a neutral platform for discovering and comparing DNS Security solutions to support informed decision-making.
26
Vendors
33
Products
327
Datapoints
Vendor Landscape how the vendors in this category relate
neutral · data-driven
Arrange bySimilarityThis categoryNetwork Security DomainThe Cyberin Framework (TCF)SeniorityEmployee countStock price
Related Wiki Articles
Some products are hidden. Sign up for free to see them all.
Filters
Integrations, Policy and identity, Performance and scale, Deployment +4 more Show ↓
Vendor
All Infoblox Cisco WatchGuard BlueCat Mimecast Quad9 Heimdal CleanBrowsing + 18 more
Integrations
All SIEM API SOAR ServiceNow Splunk ITSM SSO SIEM/SOAR
Policy and identity
All Allow/deny lists User/group policies Identity-aware policies Category controls AD/SSO integration Category filters App/domain exceptions Exceptions
Performance and scale
All High availability Low latency Global cloud Anycast Global anycast Global scale Caching Enterprise scale
Deployment
All Cloud On-Premises Hybrid API-driven Multi-cloud Agent optional Cloud-managed On-prem appliance
Use Cases
All Compliance Policy and Compliance Management Education MSPs SMBs Guest Wi-Fi Travel SOC operations
Capabilities
All Malware/phishing blocking Protective DNS DGA detection Content Filtering Data Exfiltration Detection C2 callback prevention DNS-Layer Security Malicious Domain Blocking
Encryption and standards
All DNSSEC validation DoH DoT Anycast DNS Response Rate Limiting DoH/DoT enforcement DNSSEC for Route 53 domains AWS PrivateLink
Threat intelligence
All Feeds Global telemetry Infoblox Threat Intelligence Cisco Talos Machine Learning Analytics WatchGuard threat intelligence CIRA threat intelligence AutoFocus context
25 products
Sort:
Show:
Trend Micro Web Security
Trend Micro
Content FilteringCloudGlobal telemetry
Barracuda Content Shield
Barracuda
Malware/phishing blockingAgent-based and network DNS redirectBarracuda threat intelligence
Secure64 SecureDNS
Secure64
Protective DNSEnterprise recursiveSecure64 feeds
BlueCat DNS Edge
BlueCat
Client-level visibilityCloud-managedBlueCat threat feeds
CIRA DNS Firewall
CIRA
Botnet/C2 disruptionCanadian anycastCIRA threat intelligence
SafeDNS Business
SafeDNS
Malware/phishing blockingAgent optionalSafeDNS threat database
Heimdal DNS Security
Heimdal
Malicious Domain BlockingCloud-managedHeimdal threat intelligence
Quad9 Public DNS
Quad9
DNSSEC validationGlobal anycastGlobal telemetry
CleanBrowsing Business
CleanBrowsing
Malware/phishing blockingCloudCleanBrowsing threat database
AWS Route 53 Resolver DNS Firewall
Amazon Web Services
Block/allow/alert modesAWS VPCAWS managed rules
FortiGuard DNS Security
Fortinet
DGA detectionCloudFortiGuard Labs threat intelligence
Zscaler DNS Security
Zscaler
DGA detectionAgent or pac-freeGlobal telemetry
Cloudflare Gateway
Cloudflare
Malware/phishing blockingCloud1.1.1.1 telemetry
DNSFilter
DNSFilter
Malware/phishing blockingCloudAI-based domain classification
Webroot DNS Protection
Webroot
Malware/phishing blockingCloudBrightCloud threat intelligence
Sophos DNS Protection
Sophos
Content FilteringAgentless via gatewayGlobal telemetry
WatchGuard DNSWatch
WatchGuard
Malware/phishing blockingCloud-managedWatchGuard threat intelligence
WatchGuard DNSWatchGO
WatchGuard
Malware/phishing blockingCloud-managedWatchGuard threat intelligence
Mimecast Web Security
Mimecast
Content FilteringCloudEmail/web cross-intel
Vercara UltraDNS Firewall
Vercara
DNS firewall policiesCloud recursive resolverGlobal telemetry
Cisco Umbrella DNS Security Essentials
Cisco
C2 callback preventionCloudCisco Talos
Infoblox BloxOne Threat Defense Business
Infoblox
Advanced analyticsAPI-driven automationInfoblox Threat Intelligence
Infoblox BloxOne Threat Defense Advanced
Infoblox
Automated responseCloud-managedEcosystem integrations
Infoblox Advanced DNS Protection
Infoblox
Malicious Domain BlockingAuthoritative/recursiveInfoblox Threat Intelligence
Also in Network Security
Filter by Vendor
Infoblox
5 products
Cisco
2 products
WatchGuard
2 products
BlueCat
2 products
Mimecast
1 product
Quad9
1 product
Heimdal
1 product
CleanBrowsing
1 product
Trend Micro
1 product
DNSFilter
1 product
Fortinet
1 product
N-able
1 product
Webroot
1 product
Sophos
1 product
AdGuard
1 product
Palo Alto Networks
1 product
Vercara
1 product
Akamai
1 product
Secure64
1 product
Cloudflare
1 product
Zscaler
1 product
CIRA
1 product
Amazon Web Services
1 product
NextDNS
1 product
Barracuda
1 product
SafeDNS
1 product
0 selected
Compare
Looking for the best DNS Security tool? Our Advisor can help you compare.
Ask the Advisor
CYBERIN ADVISOR