# Best DNS Security Solutions *By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)* DNS (domain name system) security solutions are used to secure DNS servers and the websites they support. These tools redirect end-user web traffic through filters capable of identifying malware signatures and other characteristics of potentially dangerous websites and media. DNS security solutions provide IT personnel with tools to classify websites, categorize users, group devices, and customize usage policies. Companies use these tools to protect their employees’ endpoint devices and their own servers by blocking dangerous content, media, and websites. They can also be used to prevent employees from accessing unapproved content, such as adult or streaming sites, in the workplace. DNS-based attacks have a variety of impacts and can cause significant disruptions. To combat this, DNS security software also possesses monitoring capabilities to identify unauthorized or malicious bots that may be capable of disrupting server performance, service availability, and network connectivity. Many DNS protection solutions are capable of detecting and mitigating distributed denial of service (DDoS) attacks. DDoS attacks may target DNS servers but can attack virtually any kind of computer or network resource. DNS protections may not be able to protect against all kinds of DDoS attacks. DDoS-specific solutions include [cloud DDoS mitigation software](https://www.g2.com/categories/cloud-ddos-mitigation) and [DDoS protection software](https://www.g2.com/categories/ddos-protection). To qualify for inclusion in the DNS Security category, a product must: - Identify and block high-risk traffic at the DNS level - Monitor traffic for dangerous sites and scan content for malware - Facilitate the classification of end users, endpoints, and digital content ## Category Overview **Total Products under this Category:** 79 ## Trust & Credibility Stats **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 2,100+ Authentic Reviews - 79+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Best DNS Security Solutions At A Glance - **Leader:** [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - **Highest Performer:** [ScoutDNS](https://www.g2.com/products/scoutdns/reviews) - **Easiest to Use:** [DNSFilter](https://www.g2.com/products/dnsfilter/reviews) - **Top Trending:** [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - **Best Free Software:** [DNSFilter](https://www.g2.com/products/dnsfilter/reviews) --- **Sponsored** ### Cloudflare Application Security and Performance Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1952&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=10700&secure%5Bresource_id%5D=1952&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fdns-security-solutions%3Fpage%3D4&secure%5Btoken%5D=5ac413b722fa5b2c903200bc6133e57c2a94f05ed3324374089562da4e67a098&secure%5Burl%5D=https%3A%2F%2Fwww.cloudflare.com%2Fapplication-services%2Fproducts%2F&secure%5Burl_type%5D=paid_promos) --- ## Top-Rated Products (Ranked by G2 Score) ### 1. [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best. **Average Rating:** 4.5/5.0 **Total Reviews:** 576 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Multi-Network Management:** 7.6/10 (Category avg: 8.9/10) - **BYOD Protection:** 7.1/10 (Category avg: 8.6/10) - **Incident Reports:** 7.4/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Cloudflare, Inc.](https://www.g2.com/sellers/cloudflare-inc) - **Company Website:** https://www.cloudflare.com - **Year Founded:** 2009 - **HQ Location:** San Francisco, California - **Twitter:** @Cloudflare (276,983 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/407222/ (6,898 employees on LinkedIn®) **Reviewer Demographics:** - **Who Uses This:** Web Developer, Software Engineer - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 62% Small-Business, 26% Mid-Market #### Pros & Cons **Pros:** - Security (54 reviews) - Ease of Use (50 reviews) - Features (45 reviews) - Performance (36 reviews) - Reliability (36 reviews) **Cons:** - Complex User Interface (24 reviews) - Expensive (24 reviews) - Complex Setup (19 reviews) - Complexity (18 reviews) - Learning Curve (15 reviews) ### 2. [Cisco Umbrella](https://www.g2.com/products/cisco-umbrella/reviews) Cisco Umbrella simplifies cybersecurity and compliance by providing a converged set of capabilities in a single, cloud-native solution. Its combination of DNS-layer security, secure web gateway, CASB, and more delivers an end-to-end experience that delights customers. Processing over 600 billion internet requests per day and leveraging the world’s largest cyber threat intelligence team in Cisco Talos, Umbrella has achieved AV-TEST’s #1 security efficacy ranking multiple times. Whether you need to strengthen your current security stack or want to transition to a more SASE-based architecture, Umbrella empowers you to confidently meet today’s cloud security goals and embrace tomorrow’s opportunities. **Average Rating:** 4.4/5.0 **Total Reviews:** 266 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.2/10) - **Multi-Network Management:** 8.2/10 (Category avg: 8.9/10) - **BYOD Protection:** 8.3/10 (Category avg: 8.6/10) - **Incident Reports:** 8.1/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Cisco](https://www.g2.com/sellers/cisco) - **Year Founded:** 1984 - **HQ Location:** San Jose, CA - **Twitter:** @Cisco (721,388 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/cisco/ (95,742 employees on LinkedIn®) - **Ownership:** NASDAQ:CSCO **Reviewer Demographics:** - **Who Uses This:** Network Engineer, Software Developer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 48% Mid-Market, 30% Enterprise ### 3. [DNSFilter](https://www.g2.com/products/dnsfilter/reviews) DNSFilter is a cybersecurity solution designed to enhance internet safety and workplace productivity by actively blocking malicious online threats. By leveraging advanced artificial intelligence, DNSFilter provides protective Domain Name System (DNS) services that effectively shield users from a wide range of cyber threats, including phishing attacks, malware, and other advanced security risks. With its robust infrastructure, DNSFilter processes an impressive volume of queries, resolving upwards of 130 billion queries daily while blocking an average of 12 million threat queries each day. The target audience for DNSFilter includes businesses of all sizes, educational institutions, and any organization that seeks to safeguard its network from cyber threats. As cyberattacks increasingly leverage DNS, DNSFilter serves as a critical line of defense for organizations looking to protect sensitive data and maintain operational integrity. By implementing DNSFilter, organizations can not only mitigate risks but also enhance overall productivity by reducing the potential for downtime caused by security incidents. One of the standout features of DNSFilter is its unique machine learning models which block threats an average of 10 days faster than traditional threat feeds. This rapid response is crucial in a landscape where cyber threats evolve quickly, and timely intervention can prevent significant damage. The AI-driven technology behind DNSFilter continuously analyzes and adapts to emerging threats, ensuring that users are protected with the most current security measures available. This proactive approach to threat detection and blocking is a key differentiator that sets DNSFilter apart from other cybersecurity solutions. In addition to its threat-blocking capabilities, DNSFilter offers a user-friendly interface that simplifies management and monitoring for IT administrators. The platform provides detailed reporting and analytics, allowing organizations to gain insights into their network's security posture and make informed decisions regarding their cybersecurity strategies. With over 35 million users placing their trust in DNSFilter, the solution not only enhances security but also fosters a more productive work environment by minimizing distractions and interruptions caused by cyber threats. Overall, DNSFilter represents a comprehensive and effective solution for organizations seeking to bolster their cybersecurity defenses while promoting a safer and more efficient online experience. Its speed, intelligence, and ease of use make it a valuable asset in the ongoing battle against cyber threats. **Average Rating:** 4.6/5.0 **Total Reviews:** 240 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.1/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.0/10 (Category avg: 8.6/10) - **Incident Reports:** 8.5/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [DNSFilter](https://www.g2.com/sellers/dnsfilter) - **Company Website:** https://www.dnsfilter.com/ - **Year Founded:** 2015 - **HQ Location:** Washington, DC - **Twitter:** @DNSFilter (2,079 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/dnsfilter/ (170 employees on LinkedIn®) **Reviewer Demographics:** - **Who Uses This:** Owner, IT Director - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 60% Small-Business, 34% Mid-Market ### 4. [Cloud-Delivered Security Services](https://www.g2.com/products/cloud-delivered-security-services/reviews) Overview Our Cloud-Delivered Security Services are natively integrated, offering consistent best-in-class protection everywhere. Backed by our world-renowned Unit 42® Threat Research team, this one-of-a-kind protection uses the network effect of 70,000+ global customers to share intelligence across all threat vectors to stop known, unknown and zero-day threats 180X faster than any other platform or point solution and prevent patient zero. What are Cloud-Delivered Security Services? A comprehensive suite of natively-integrated security services delivered from the cloud that provide protection for a customer’s entire network, securing all users, applications, devices, and data, regardless of the location. Our security services are powered by Precision AI™ and analyze real network traffic inline and stop threats in real time, including phishing, malware, command and control, ransomware, DNS-layered threats, and much more. These services include: Advanced Threat Prevention, the industry’s leading intrusion prevention system that addresses known and unknown command-and-control attacks from red team tools, as well as injection attacks and vulnerability exploits. Advanced WildFire, the industry’s largest malware analysis engine that stops the first instance of known, unknown and highly-evasive malware. Advanced URL Filtering, the industry’s first web security engine to stop unknown phishing attacks in real time. Advanced DNS Security, the industry’s most comprehensive DNS security solution that offers over 2x more threat coverage than the next leading security vendor and is also the industry’s first solution to stop network-based DNS hijacking attacks in real time. IoT/OT Security, the industry’s most comprehensive zero trust solution for IoT devices, helping you see and secure all connected devices in your network. NG-CASB, our SaaS application and data security solution that allows you to discover and control all of the SaaS consumption in your network. AI Access Security, our solution that ensures safe use of GenAI apps with access control, data protection and real-time visibility of over 600 applications, so that your employees can securely use AI to increase their productivity. With the power of AI and a robust global cloud infrastructure, Palo Alto Networks Cloud-Delivered Security Services can scale to stay ahead of today's threats and keep up with your organization's network security needs. **Average Rating:** 4.4/5.0 **Total Reviews:** 101 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Multi-Network Management:** 8.6/10 (Category avg: 8.9/10) - **BYOD Protection:** 8.4/10 (Category avg: 8.6/10) - **Incident Reports:** 8.0/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks (128,686 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/30086/ (21,355 employees on LinkedIn®) - **Ownership:** NYSE: PANW **Reviewer Demographics:** - **Who Uses This:** Network Engineer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 41% Mid-Market, 34% Enterprise ### 5. [IBM NS1 Connect](https://www.g2.com/products/ibm-ns1-connect/reviews) IBM NS1 Connect is a managed authoritative DNS and traffic steering service built on an always-on, API-first architecture. It ensures fast, secure, and reliable global connectivity, ideal for enterprises prioritizing uptime and seamless digital experiences. With a global anycast DNS network spanning 26 points of presence, NS1 Connect minimizes latency worldwide and offers 100% uptime backed by an SLA. It delivers up to 3x DNS performance improvement in China and safeguards availability even during large-scale DDoS attacks. Its API-first architecture enables easy integration and automation for efficient operations. To manage consistent DNS configurations across providers like IBM NS1 Connect and Amazon Route 53, IBM Cloud Sync is the solution. It provides continuous, bidirectional synchronization of DNS zones, records, and traffic policies — whether your primary DNS is on NS1 Connect or Amazon Route 53. Free trials are available for both solutions on product page. With preconfigured integrations for leading DevOps tools like Ansible and Terraform, IBM® NS1 Connect supports automation of routine maintenance tasks, further streamlining DNS management for enterprises looking to optimize their performance and reliability. **Average Rating:** 4.5/5.0 **Total Reviews:** 80 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.1/10 (Category avg: 8.9/10) - **BYOD Protection:** 8.9/10 (Category avg: 8.6/10) - **Incident Reports:** 8.9/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Company Website:** https://www.ibm.com/us-en - **Year Founded:** 1911 - **HQ Location:** Armonk, NY - **Twitter:** @IBM (709,023 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (324,553 employees on LinkedIn®) **Reviewer Demographics:** - **Who Uses This:** Software Engineer - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 48% Mid-Market, 26% Enterprise #### Pros & Cons **Pros:** - DNS Management (16 reviews) - Traffic Management (13 reviews) - Ease of Use (7 reviews) - Features (6 reviews) - Reliability (5 reviews) **Cons:** - Complex User Interface (7 reviews) - DNS Issues (4 reviews) - Expensive (3 reviews) - Limited Features (3 reviews) - Compatibility Issues (1 reviews) ### 6. [Webroot DNS Protection](https://www.g2.com/products/opentext-webroot-dns-protection/reviews) What if you could stop up to 88% of known malware BEFORE it hit endpoints and networks? Well, you can. Webroot® DNS Protection works at the DNS layer to prevent malicious traffic and block malware before it infiltrates your networks, endpoints, and end users. Plus, it’s the first DNS filtering product on the market to combine privacy and security by handling DNS over HTTPS (DoH) requests. Here’s a real-world testimonial from a Webroot partner case study: “We blocked 135,470 risky DNS lookups in the first 30 days.” – Bobby Sowder, Director of Client Success, Greystone Technology With over 5000 endpoints under management, Greystone Technology has seen first-hand how a layered approach to cybersecurity makes their business and customers more resilient against cyber threats. \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ Powered by the proprietary Webroot® Platform, our proprietary threat intelligence architecture that is trusted by industry-leading network and security providers worldwide, DNS Protection is a lightweight, easy-to-implement domain filtering service designed to improve security with more granular control over internet access. Get the visibility and control you need to successfully stop cyberattacks at the DNS layer — before they hit your business or clients. **Average Rating:** 4.4/5.0 **Total Reviews:** 68 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 8.9/10 (Category avg: 8.6/10) - **Incident Reports:** 8.3/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [OpenText](https://www.g2.com/sellers/opentext) - **Year Founded:** 1991 - **HQ Location:** Waterloo, ON - **Twitter:** @OpenText (21,588 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2709/ (23,339 employees on LinkedIn®) - **Ownership:** NASDAQ:OTEX **Reviewer Demographics:** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 71% Small-Business, 23% Mid-Market ### 7. [BloxOne DDI](https://www.g2.com/products/bloxone-ddi/reviews) BloxOne™ DDI is the first and only cloud-native DDI solution that simplifies DDI control and management at scale. **Average Rating:** 4.4/5.0 **Total Reviews:** 27 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 10.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 10.0/10 (Category avg: 8.6/10) - **Incident Reports:** 10.0/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Infoblox](https://www.g2.com/sellers/infoblox) - **Company Website:** https://www.infoblox.com - **Year Founded:** 1999 - **HQ Location:** Santa Clara, California - **Twitter:** @Infoblox (11,284 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/8697/ (3,022 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 52% Enterprise, 26% Small-Business ### 8. [ScoutDNS](https://www.g2.com/products/scoutdns/reviews) ScoutDNS is a next-generation Protective DNS platform designed to secure networks and users from online threats, inappropriate content, and emerging risks, both on and off-network. With both agent-based and network-based deployment options, ScoutDNS offers flexible protection for any environment. It safeguards users on any device with a lightweight agent and secures entire networks through seamless DNS filtering, blocking malicious domains, inappropriate content, and shadow IT at the DNS layer. ScoutDNS delivers real-time visibility and actionable analytics, enabling enhanced threat detection and compliance. Integration with Active Directory and Entra ID simplifies user-based policy management and supports compliance frameworks like CIPA, NIST, and CMMC. Trusted by IT teams, MSPs, schools, and enterprises, ScoutDNS provides scalable, proactive DNS protection, helping organizations block threats before they reach endpoints while ensuring user productivity and network security. **Average Rating:** 4.9/5.0 **Total Reviews:** 60 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.5/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.1/10 (Category avg: 8.6/10) - **Incident Reports:** 8.7/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [ScoutDNS](https://www.g2.com/sellers/scoutdns) - **Company Website:** https://www.scoutdns.com - **HQ Location:** Dallas, TX - **Twitter:** @ScoutDNS (97 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/scoutdns/ (5 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Religious Institutions, Information Technology and Services - **Company Size:** 65% Small-Business, 22% Mid-Market ### 9. [MXToolbox](https://www.g2.com/products/mxtoolbox/reviews) MxToolbox is the leading provider of free Blacklist, DNS and Email tools and paid Email Delivery solutions. MxToolbox has almost two decades of experience in helping companies large and small improve their email delivery. MxToolbox Delivery Center is your comprehensive service for understanding email that has been sent "From" your domain. MxToolbox provides you with information on: - Who is sending email purporting to be from your domain - What is the reputation of your senders' IPs - Where your campaigns are likely to land - Inbox, Spam or Junk folders - What complaints your recipients are making to their Inbox Providers - Geolocation of your senders and What their blacklist reputations are - How your SPF, DKIM and DMARC setup is performing - What senders are failing DKIM - What senders are failing SPF verification - When to setup more restrictive policies for DMARC - What on-going maintenance you need to maintain and improve your email deliverability Delivery Center enables you to monitor email delivery information unlike any other. Improve your deliverability today! **Average Rating:** 4.1/5.0 **Total Reviews:** 29 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10) **Seller Details:** - **Seller:** [MXToolbox.com](https://www.g2.com/sellers/mxtoolbox-com) - **Year Founded:** 2003 - **HQ Location:** Austin, TX - **Twitter:** @MXToolBox (1,941 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1403914/ (14 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services - **Company Size:** 52% Small-Business, 34% Mid-Market #### Pros & Cons **Pros:** - Data Analysis (2 reviews) - DMARC Management (2 reviews) - Features (2 reviews) - Accuracy (1 reviews) - Deliverability Improvement (1 reviews) **Cons:** - Costly Services (1 reviews) - Email Functionality (1 reviews) - Email Management (1 reviews) ### 10. [Verizon DNS Safeguard](https://www.g2.com/products/verizon-dns-safeguard/reviews) DNS Safeguard is a cloud-based DNS security platform that blocks unsafe internet destinations at the earliest point of contact, before a connection is made. Protect your network from web content and sites known for malware, phishing, ransomware, and other common and uncommon threats. **Average Rating:** 4.3/5.0 **Total Reviews:** 13 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 7.2/10 (Category avg: 9.2/10) - **Multi-Network Management:** 8.3/10 (Category avg: 8.9/10) - **BYOD Protection:** 7.2/10 (Category avg: 8.6/10) - **Incident Reports:** 8.3/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Verizon Enterprise](https://www.g2.com/sellers/verizon-enterprise) - **Year Founded:** 1988 - **HQ Location:** Basking Ridge, NJ - **Twitter:** @VerizonEnterpr (6 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1094/ (15,946 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 46% Small-Business, 31% Enterprise ### 11. [Infoblox NIOS DDI](https://www.g2.com/products/infoblox-nios-ddi/reviews) Infoblox NIOS DDI is the industry-leading platform for managing and securing the mission-critical DNS, DHCP and IP address management, or “DDI” services, that keep every user, device and application connected. Trusted by more than 13,000 customers worldwide—including most of the Fortune 500—NIOS provides a purpose-built, enterprise-grade platform for critical network service visibility, automation, control and resiliency in on-premises, hybrid and multi-cloud network environments. Whether organizations are transitioning beyond traditional data centers or simply seeking to improve uptime and manageability on-premises, NIOS simplifies management, reduces errors and outages, speeds deployments and ensures five-nines reliability for the critical network services that keep the business running. **Average Rating:** 4.6/5.0 **Total Reviews:** 19 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Multi-Network Management:** 10.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 10.0/10 (Category avg: 8.6/10) - **Incident Reports:** 10.0/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Infoblox](https://www.g2.com/sellers/infoblox) - **Company Website:** https://www.infoblox.com - **Year Founded:** 1999 - **HQ Location:** Santa Clara, California - **Twitter:** @Infoblox (11,284 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/8697/ (3,022 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 58% Enterprise, 29% Mid-Market #### Pros & Cons **Pros:** - Automation (1 reviews) - Centralized Management (1 reviews) - Dashboard Features (1 reviews) - DNS Management (1 reviews) - Ease of Use (1 reviews) **Cons:** - Complex Configuration (1 reviews) - Complex Setup (1 reviews) - Complex User Interface (1 reviews) - Configuration Difficulty (1 reviews) - Expensive (1 reviews) ### 12. [CIRA DNS Firewall](https://www.g2.com/products/cira-dns-firewall/reviews) Uniquely Canadian cybersecurity delivered by CIRA. The CIRA DNS Firewall delivers protection against malware and phishing attacks by blocking access to malicious websites at the DNS layer. And it does this only from servers located in Canada to improve performance, data privacy, and sovereignty. Combining advanced data science, a global network for threat detection and decades of experience managing critical infrastructure to deliver a cost-effective and easy way to add to your defence-in-depth strategy. The unique threat intelligence is provided by Akamai and includes multiple additional feeds, like that from the Canadian Center for Cybersecurity. After-all you don't really have depth if your threat information all comes from the same source. On average we add more than 100,000 net new malicious URLs to the block list every day, and we do it within 14 minutes of the first query anywhere on the global internet. Protecting over 3 million Canadians and counting. As a non-profit, we work closely with network operators in Canada, keep all data sovereign and private, and give-back through grant programs and helps to build Canada's internet infrastructure. **Average Rating:** 4.8/5.0 **Total Reviews:** 17 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.3/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.8/10 (Category avg: 8.6/10) - **Incident Reports:** 8.1/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [CIRA](https://www.g2.com/sellers/cira) - **Year Founded:** 2000 - **HQ Location:** Ottawa - **LinkedIn® Page:** https://www.linkedin.com/company/899383/ (189 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 56% Mid-Market, 39% Enterprise ### 13. [Avast Small Business Cybersecurity Solutions](https://www.g2.com/products/avast-small-business-cybersecurity-solutions/reviews) Essential cyber protection and security control for your small business Avast Essential Business Security helps deliver device security for small businesses that want remote visibility and centrally controlled protection against viruses, phishing, ransomware, and advanced cyberattacks.  Avast Small Business Solutions deliver next-gen endpoint protection for business Windows PCs, Mac, and Windows servers that you can manage anywhere via a web browser. Our robust, easy-to-use security for devices and data is designed to keep small organizations and their employees safer online. Avast antivirus with multiple layers of security, online privacy, and remote-control features provides powerful cybersecurity controlled via a cloud-based management console. **Average Rating:** 4.3/5.0 **Total Reviews:** 109 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) **Seller Details:** - **Seller:** [Gen Digital](https://www.g2.com/sellers/gen-digital) - **Year Founded:** 2022 - **HQ Location:** Tempe, Arizona - **Twitter:** @GenDigitalInc (4,477 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/gendigitalinc (3,421 employees on LinkedIn®) - **Ownership:** NASDAQ: GEN **Reviewer Demographics:** - **Who Uses This:** IT Manager - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 42% Mid-Market, 39% Small-Business #### Pros & Cons **Pros:** - Customization (2 reviews) - Monitoring (2 reviews) - Protection (2 reviews) - Security (2 reviews) - Accessibility (1 reviews) **Cons:** - Compatibility Issues (1 reviews) - Complex Installation (1 reviews) - Complexity (1 reviews) - Complex Setup (1 reviews) - Inadequate Protection (1 reviews) ### 14. [DNSSense](https://www.g2.com/products/dnssense/reviews) DNSSense DNSEye is a sophisticated cybersecurity solution that uses AI to inspect outbound DNS traffic for anomalies indicating malicious DNS queries from any device, user, or application. With no need for agents or topology changes, it is easy to deploy and offers protection against both known and concealed threats. DNSEye integrates DNS, EDR, and xDR platforms to provide valuable insights into traffic activity and unveil hidden attack vectors and compromised users. DNSEye's early detection of unusual DNS requests offers crucial protection against zero-day attacks, thereby enhancing network security. By cross-referencing its findings with existing cybersecurity measures, DNSEye uncovers any overlooked threats, reinforcing the security layer and demonstrating its added value to your cybersecurity stack. When used with SIEM appliances, DNSEye serves as an intelligent filter for your DNS traffic, highlighting only the records that warrant attention. This feature enables SOC teams to manage large volumes of DNS traffic data without incurring additional licencing costs. DNSEye is compatible with various DNS server brands and can be deployed swiftly, even in large enterprise networks. This rapid deployment, coupled with significant savings on DNS log-related expenses, maximises the return on SIEM investments and makes DNSEye a valuable addition to any organisation's cybersecurity toolkit. **Average Rating:** 4.9/5.0 **Total Reviews:** 64 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.9/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.8/10 (Category avg: 8.6/10) - **Incident Reports:** 9.8/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [DNSSense](https://www.g2.com/sellers/dnssense-b595fa1a-990d-4143-9ca5-f3fcf9ae9960) - **Year Founded:** 2016 - **HQ Location:** London, UK - **Twitter:** @dnssense (23 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/dnssense (27 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 57% Enterprise, 34% Mid-Market ### 15. [WebTitan Web Filter](https://www.g2.com/products/webtitan-web-filter/reviews) WebTitan DNS Filter is a powerful DNS based web filtering and security solution providing protection from web based cyber threats including Malware, Ransomware and malicious sites. WebTitan Web Filter allows advanced web and dns filtering control to businesses around the world and can be deployed locally and interacted with through an advanced API set. WebTitan Web Filter monitors, controls and protects businesses and users from online threats. We provides real time automated malicious threat detection & blocking. We block over 300,000 Malware and Ransomware websites every single day and have 3 million malicious sites under control at any one time. Our threat intelligence engine is one of the largest in the world and updated every minute. WebTitan DNS Filter can be set up and managed in minutes. We provide advanced threat protection at source driven by both AI and machine learning. Block Phishing Sites: Prevent access to phishing sites, C2 callbacks and command & control attacks Easy & Quick Installation: See immediate results after a very quick and easy set-up. Cloud-based: Protect your business on-the-go with our cloud-based system. No hardware to install or software to manage Virus & Malware Detection: Block viruses, malware and ransomware from affecting your business. Free Tech Support: We offer excellent free technical support from a live support engineer 24/7. With over 25 years web security experience TitanHQ are trusted by over 8,500 businesses across 135 countries. WebTitan Technical Feature List Two primary use cases: 1. A DNS security layer. Blocks Malware, Phishing, Viruses, Ransomware & Malicious Sites at source. 2. Brand protection. Advanced content control. Functions: 1. URL filtering. Filters website URLs into 53 predefined categories in 200 languages. An additional 8 customizable categories are also available. 2. Security Layer. Best-in-class malicious URL detection. SSL supported. HTTP and HTTPS covered. 3. Flexible Policies. Create Policies for an entire organization, from AD groups down to the user level. 4. API Driven. Integrate and control Webtitan using its extensive APIs, roll your own UI, auto provision your customers from your existing systems. Integrate billing and monitoring systems. 5. Reporting: Realtime reporting dashboard to the per DNS request level or high level reports with customizable filters. Schedule customizable reports in multiple formats to be delivered via email. Drill down options with 55 predefined reports to choose from. 6. Deployment options. Gateway/shared cloud/Private Cloud. WebTitan Cloud, a private cloud deployed for you on AWS with failover or hosted by you in your own data centre. We deploy servers globally tailored for you and your operations. The IP for DNS forwarding provided to you are yours and yours only. Your data in your geographic locations. 7. Group Policies. If you use Windows Active Directory, you have already got groups defined, pull them into WebTitan and apply policies to individual groups. 8. Safe Search: One click enforcement of Google and bing SafeSearch and YouTube restricted mode (this can be customised) 9. Whitelist and Blacklist functionality. Per policy white and black list functionality. 10. AD Integration. Allows for user identification, user/group policy application. 11. On the Go roaming agent. WebTitan is perfect for BYOD environments where employees use multiple devices on and off site. Covering windows and MacOS. We also don’t charge extra for our agents. 12. IPv6 coverage. We have full IPv6 support thus are future proofed. 13. Location types Static IP, dynamic IP, Dynamic DNS, Roaming or Virtual Locations (EDNS) all supported. 14. Bypass keys. Each Cloud Key can be created for single or multiple users and are controlled by time or date. This key can over ride the blocked pages; each key activity is also individually reported on. 15. Customisable block pages – Each customer can have their own specific block page to show their messaging and branding. 16. White Labelling: Our GUI can be 100% White Labelled to your branding Features: 1. Market-leading accuracy, coverage and malicious website detection collated through real time advanced analytics and detection from 550 million end users and 5 trillion web queries per month covering 99.9% of the active web. Proprietary Al-based and machine learning categorization engines process millions of URLs daily. 2. Scalable. Solutions can handle any volume of usage with no latency. 3. Real time auto threat and category updating. 4. Support. Renowned for our top-class support team both pre and post sales. This full support comes at no extra cost! 5. Multitenant. Support multiple clients from one centralised platform. Each location has its own log in and policy manager. Each account administrator can control the content accessed for multiple locations 6. User identification: Identify individual users and report on their activity. Integrates with active directory or LDAP to allow you to create per user or per group reporting for your organisation. 7. Full path detection: One of the critical features that Web Titan provides is an ability for deep analysis due to full path detection. Page and path-level reporting provides analytical credibility to what is being marked as malicious. URLs in the Web Titan databases are detailed down to the path level. 8. Zero Latency: Beauty of DNS Filtering is there is no impact on internet speeds to your users. 9. 3 step setup: i) add location identifier ii) Set policy iii) Forward DNS to WebTitan Cloud **Average Rating:** 4.3/5.0 **Total Reviews:** 76 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) - **Multi-Network Management:** 10.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.8/10 (Category avg: 8.6/10) - **Incident Reports:** 9.5/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [CyberSentriq](https://www.g2.com/sellers/cybersentriq-d38aeb75-bc88-459b-a2d2-16ccbed4d6c5) - **Year Founded:** 2025 - **HQ Location:** Galway ,Galway - **Twitter:** @Redstor (1,958 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/cybersentriq/ (194 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services, Education Management - **Company Size:** 47% Mid-Market, 44% Small-Business ### 16. [SafeDNS web content filtering service](https://www.g2.com/products/safedns-web-content-filtering-service/reviews) SafeDNS provides a sophisticated cloud-based web filter for internet security and web content filtering powered by artificial intelligence and machine learning. It protects users on the web by blocking botnets, malicious, and phishing sites. Moreover, it filters out intrusive online ads and web content users consider inappropriate or work unrelated. Segments - Web Filtering For Large Public Venues and Wi-Fi Hotspot Owners - Web Filtering For Homes - Web Filtering For Nonprofits - Web Filtering For Partners & Telecoms - Web Filtering For Education & Libraries - Web Filtering For Hardware & Software Vendors Main Product features 1) Protection of/from: - Entire networks, off-networks, and mobile users - Any internet-connected device with any OS - Computers removed from the network with software (the SafeDNS Agent) - Mobile devices taken off the network, with SafeDNS Agent, and any type of connection (cell, Wi-Fi) with Mobile Filtering Option - Phishing and malware - Botnets C&C servers 2) Customization: - A scheduler to filter during specific periods - Block page - standard, custom logo+text, HTML mode, the concealed block page - Different filtering policies for each user working on the same computer, with SafeDNS Agent - Custom settings managed from anywhere on the Internet, via user dashboard or SafeDNS Agent - Multiple role-based administrators for enterprise customers - Advanced management of allowlists & denylists - Allowlist-only mode - Forced Safe Search for Google & Bing - Forced YouTube Restricted Mode - Blocking differently on some computers, no blocking at all on others - with SafeDNS Agent, - Mobile Filtering option, and IP policies. - Individual allowlist & denylist - for each filtering policy - Multi-policy filtering 3) In addition: - Subscription API for integration with OSS/BSS provider's system - 61 filtering categories - Adblocking (banner, video, audio, context, pop-up ads) - Proxy & anonymizer blocking - Notifications whenever devices try to load botnet sites - Supporting dynamic IPs, any dynamic DNS service or update API - Logging administrator's actions - Shortcuts for local network resources and Active Directory (Aliases) - Detailed reports and stats - Archiving stats and logs for 1-2 years (depending on Service Plan) - Stats export (CSV) - Support of AD resources in the cloud service - with a particular version of SafeDNS Agent or an option in the cloud - Standard support by email and phone, online - via Feedback Form or a chat on the SafeDNS site - A 15-day trial available **Average Rating:** 4.5/5.0 **Total Reviews:** 19 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 9.2/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.2/10 (Category avg: 8.6/10) - **Incident Reports:** 8.6/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [SafeDNS](https://www.g2.com/sellers/safedns) - **Year Founded:** 2010 - **HQ Location:** Alexandria, VA - **Twitter:** @SafeDNS (984 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10128526 (18 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 47% Mid-Market, 42% Small-Business ### 17. [Whalebone](https://www.g2.com/products/whalebone/reviews) Whalebone provides user-centric cybersecurity for telcos, ISPs, enterprises, and government/public institutions. It supports millions of internet users with seamless digital life protection, keeping them safe from malware, phishing, ransomware, and other malicious digital attacks – without the need to download anything. The European Commission has recognized Whalebone’s exceptional capabilities by appointing it the Consortium Leader for the European Union’s DNS4EU project. This initiative positions Whalebone as the sole developer and operator of the official DNS resolver for the EU, in collaboration with a consortium of 13 members from 10 countries, validating Whalebone's expertise in providing secure DNS servers that protect against digital attacks. The success of Whalebone Aura among global telco providers validates the company’s ability to deliver robust DNS security that is effective and user-friendly. Whalebone’s product suite also includes Peacemaker (for regional ISPs) and Immunity (for enterprises and public institutions), all of which have proven instrumental in defending against threats to DNS. Whalebone has more than 300+ customers around the globe and 100+ team members worldwide, with a mission is to bring cybersecurity to 1 billion people. **Average Rating:** 4.4/5.0 **Total Reviews:** 14 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.2/10) - **Multi-Network Management:** 8.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 7.4/10 (Category avg: 8.6/10) - **Incident Reports:** 8.3/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Whalebone](https://www.g2.com/sellers/whalebone) - **Year Founded:** 2016 - **HQ Location:** Brno, CZ - **Twitter:** @whaleboneio (211 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10961729 (173 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 36% Small-Business, 36% Enterprise ### 18. [VIPRE Endpoint Security Cloud](https://www.g2.com/products/vipre-endpoint-security-cloud/reviews) VIPRE Endpoint Security Cloud is a next-generation antivirus (NGAV) platform, a.k.a. Endpoint Protection Platform (EPP), that detects and blocks malicious activity on your Microsoft Windows and Apple MacOS desktops, laptops, and servers. Consistently ranked at the top of independent testing agencies' lists, VIPRE combines excellent detection with low false positives, minimal system impact, and an easy to use mobile-ready administrative console. Packed with other goodies such as integrated vulnerability and patch management, web access control, and DNS protection, VIPRE will keep you safe against even the most sophisticated threats. **Average Rating:** 4.3/5.0 **Total Reviews:** 56 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) **Seller Details:** - **Seller:** [VIPRE Security](https://www.g2.com/sellers/vipre-security) - **Year Founded:** 1994 - **HQ Location:** Clearwater, FL - **Twitter:** @VIPRESecurity (8,305 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/11052300/ (234 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Information Technology and Services - **Company Size:** 48% Small-Business, 43% Mid-Market #### Pros & Cons **Pros:** - Alert Notifications (1 reviews) - Antivirus Software (1 reviews) - Ease of Use (1 reviews) - Easy Installation (1 reviews) - Easy Setup (1 reviews) ### 19. [Link11](https://www.g2.com/products/link11/reviews) Link11 is a specialized European IT security provider headquartered in Germany, offering a comprehensive suite of cloud-native IT security services designed to help organizations prevent business disruptions and enhance their cyber resilience. With a global presence that spans Europe, North America, and Asia, Link11 focuses on safeguarding networks and critical applications against a wide array of evolving cyber threats. Targeted primarily at businesses that require robust security measures to protect their digital assets, Link11's services are particularly beneficial for sectors that are vulnerable to cyberattacks, including : - Finance - Healthcare - E-commerce. The company’s integrated security solutions cater to various use cases, from defending against Distributed Denial of Service (DDoS) attacks to ensuring the integrity of web applications and APIs. By addressing the specific needs of its clients, Link11 empowers organizations to maintain operational continuity and secure sensitive information. The key features of Link11's offerings include advanced Network Security, which utilizes machine learning to provide rapid DDoS protection. This capability enables: - Zero-time-to-mitigate defense against known attack vectors - Mitigation of new threats in under 10 seconds Additionally, the Web Application & API Protection (WAAP) platform combines essential security tools, including: - Web Application Firewall (WAF) - Web DDoS Protection - Bot Management - API Security This all-in-one solution is designed to defend against the OWASP Top 10 vulnerabilities and complex Layer 7 attacks, ensuring comprehensive protection for web applications. Moreover, Link11 enhances application performance through its Secure CDN and Secure DNS solutions, which leverage a global Anycast network to deliver maximum availability and speed. This focus on performance ensures that security measures do not compromise user experience, allowing businesses to operate efficiently while maintaining high levels of protection. Link11 is recognized as a BSI-qualified provider for DDoS protection of critical infrastructure (KRITIS) and adheres to stringent data security and compliance standards. The company holds certifications such as: - PCI-DSS - C5 - ISO 27001 The company’s high-performance, multi-terabit global network is continuously monitored by the Link11 Security Operations Center (SOC), providing immediate response capabilities and ongoing protection for a diverse range of industries worldwide. This commitment to security and operational excellence positions Link11 as a reliable partner for organizations seeking to enhance their cybersecurity posture. **Average Rating:** 4.7/5.0 **Total Reviews:** 38 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10) - **Multi-Network Management:** 10.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 10.0/10 (Category avg: 8.6/10) - **Incident Reports:** 10.0/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Link11](https://www.g2.com/sellers/link11) - **Company Website:** https://www.link11.com - **HQ Location:** Frankfurt, DE - **Twitter:** @Link11GmbH (1,033 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/link11/ (113 employees on LinkedIn®) **Reviewer Demographics:** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 43% Mid-Market, 30% Small-Business #### Pros & Cons **Pros:** - Customer Support (3 reviews) - API Management (2 reviews) - DDoS Protection (2 reviews) - Ease of Use (2 reviews) - Protection (2 reviews) **Cons:** - Complex Rule Management (1 reviews) - Difficult Learning Curve (1 reviews) - Learning Difficulty (1 reviews) ### 20. [F5 BIG-IP DNS](https://www.g2.com/products/f5-big-ip-dns/reviews) F5 BIG-IP DNS is a comprehensive solution designed to enhance the performance, availability, and security of global applications by intelligently managing DNS traffic and implementing global server load balancing (GSLB. It ensures that users are directed to the most optimal server or data center, whether on-premises, co-located, or in the cloud, thereby improving user experience and resource utilization. Additionally, BIG-IP DNS safeguards DNS infrastructures against DDoS attacks and other malicious threats, maintaining uninterrupted application access. Key Features and Functionality: - Global Server Load Balancing (GSLB: Distributes user traffic across multiple servers and data centers based on factors such as location, server health, and performance, ensuring optimal application availability and responsiveness. - DNS Security: Offers robust protection mechanisms, including DNSSEC to prevent cache poisoning and man-in-the-middle attacks, and DNS firewall services to mitigate DDoS attacks and block access to malicious domains. - High Performance and Scalability: Utilizes multicore processing and DNS Express to handle high query volumes, scaling up to 100 million responses per second, effectively managing traffic spikes and large-scale DDoS attacks. - Automated Failover and Monitoring: Continuously monitors server and application health, enabling automatic failover to backup data centers or servers, ensuring consistent application availability. - Integration and Flexibility: Seamlessly integrates with existing network infrastructures, supporting various deployment options including hardware, virtual editions, and cloud-native formats, providing flexibility to meet diverse organizational needs. Primary Value and Problem Solved: F5 BIG-IP DNS addresses the critical need for reliable and secure application delivery in today's distributed and dynamic IT environments. By intelligently managing DNS traffic and implementing global server load balancing, it ensures that users are consistently directed to the best-performing and most accessible application instances. This not only enhances user experience through reduced latency and improved application responsiveness but also fortifies the DNS infrastructure against potential threats, thereby maintaining business continuity and protecting organizational reputation. **Average Rating:** 4.1/5.0 **Total Reviews:** 8 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 7.7/10 (Category avg: 8.9/10) - **BYOD Protection:** 5.0/10 (Category avg: 8.6/10) - **Incident Reports:** 7.5/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [F5](https://www.g2.com/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5) - **HQ Location:** Seattle, Washington - **Twitter:** @F5Networks (1,385 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/4841/ (6,133 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 63% Enterprise, 25% Mid-Market ### 21. [threatER](https://www.g2.com/products/threater/reviews) threatER is the leading preemptive cybersecurity platform for building and maintaining trust at scale. Our SaaS solution continuously learns from all available data, allowing you to gain better insights and extract more value from your security stack. threatER transforms your security stack into a smart, adaptive and automated prevention engine. With threatER you reduce risk, get more value from your security investments and reinforce trust across every connection without slowing down your business. Learn more at www.threater.com. **Average Rating:** 4.8/5.0 **Total Reviews:** 33 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) **Seller Details:** - **Seller:** [threatER](https://www.g2.com/sellers/threater) - **Company Website:** https://www.threater.com/ - **HQ Location:** Tysons, Virginia - **LinkedIn® Page:** https://www.linkedin.com/company/threater/ (28 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 56% Mid-Market, 32% Enterprise #### Pros & Cons **Pros:** - Ease of Use (7 reviews) - Performance Efficiency (3 reviews) - Security (3 reviews) - Setup Ease (3 reviews) - Threat Protection (3 reviews) **Cons:** - Performance Issues (3 reviews) - Compatibility Issues (2 reviews) - False Positives (2 reviews) - Access Control (1 reviews) - Access Issues (1 reviews) ### 22. [DomainTools](https://www.g2.com/products/domaintools/reviews) DomainTools is the global leader for internet intelligence and the first place security practitioners go when they need to know. The world's most advanced security teams use our solutions to identify external risks, investigate threats, and proactively protect their organizations in a constantly evolving threat landscape. DomainTools constantly monitors the Internet and brings together the most comprehensive and trusted domain, website and DNS data to provide immediate context and machine-learning driven risk analytics delivered in near real-time. Visit domaintools.com to experience firsthand why DomainTools is the first stop for advanced security teams when they need to know. **Average Rating:** 3.8/5.0 **Total Reviews:** 13 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) - **Multi-Network Management:** 6.7/10 (Category avg: 8.9/10) - **BYOD Protection:** 6.7/10 (Category avg: 8.6/10) - **Incident Reports:** 8.3/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [DomainTools](https://www.g2.com/sellers/domaintools) - **Year Founded:** 2004 - **HQ Location:** Seattle, WA, Washington - **Twitter:** @DomainTools (13,189 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/domaintools (141 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 62% Small-Business, 31% Enterprise ### 23. [FlashStart](https://www.g2.com/products/flashstart/reviews) The ultimate solution for DNS security, with an advanced AI-based cloud filter and a global Anycast network that ensures robust and fast (top 5) threat protection. **Average Rating:** 4.5/5.0 **Total Reviews:** 6 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Multi-Network Management:** 8.3/10 (Category avg: 8.9/10) - **BYOD Protection:** 9.2/10 (Category avg: 8.6/10) - **Incident Reports:** 8.3/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [FlashStart Internet protection](https://www.g2.com/sellers/flashstart-internet-protection) - **Year Founded:** 2003 - **HQ Location:** Cesena, IT - **Twitter:** @FlashStart (66 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/flashstart/ (22 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 56% Small-Business, 44% Mid-Market ### 24. [Comodo](https://www.g2.com/products/comodo/reviews) Secure Internet Gateway - Free Secure DNS Web Access Control, Protection, and Visibility Anywhere, Any Device! **Average Rating:** 4.0/5.0 **Total Reviews:** 5 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.2/10) - **Multi-Network Management:** 7.5/10 (Category avg: 8.9/10) - **BYOD Protection:** 7.5/10 (Category avg: 8.6/10) - **Incident Reports:** 7.1/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Xcitium](https://www.g2.com/sellers/xcitium) - **Year Founded:** 2018 - **HQ Location:** Clifton, NJ - **LinkedIn® Page:** https://www.linkedin.com/company/163167/ (676 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 80% Small-Business, 20% Mid-Market ### 25. [Infoblox Threat Defense](https://www.g2.com/products/infoblox-threat-defense/reviews) Infoblox Threat Defense provides preemptive security using a combination of predictive threat intelligence and ML- based algorithmic detections to stop threats before they reach users, devices or cloud workloads. **Average Rating:** 4.8/5.0 **Total Reviews:** 5 **User Satisfaction Scores:** - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.2/10) - **Multi-Network Management:** 10.0/10 (Category avg: 8.9/10) - **BYOD Protection:** 8.3/10 (Category avg: 8.6/10) - **Incident Reports:** 10.0/10 (Category avg: 8.5/10) **Seller Details:** - **Seller:** [Infoblox](https://www.g2.com/sellers/infoblox) - **Company Website:** https://www.infoblox.com - **Year Founded:** 1999 - **HQ Location:** Santa Clara, California - **Twitter:** @Infoblox (11,284 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/8697/ (3,022 employees on LinkedIn®) **Reviewer Demographics:** - **Company Size:** 40% Small-Business, 40% Mid-Market #### Pros & Cons **Pros:** - Internet Security (2 reviews) - Protection (2 reviews) - Security (2 reviews) - Automation (1 reviews) - Cloud Technology (1 reviews) **Cons:** - Complex Setup (1 reviews) - Expensive (1 reviews) ## Parent Category [Network Security Software](https://www.g2.com/categories/network-security) --- ## Buyer Guide ### What You Should Know About DNS Security Solutions ### What are DNS Security Solutions? DNS (domain name system) security solutions protect the infrastructure and the websites it supports. They can identify potentially dangerous websites and content by redirecting end-user web traffic through certain filters. They can also prevent other attacks, including DNS hijacking and DNS tunneling. Most DNS security software can also detect and mitigate distributed denial of service (DDoS) attacks. DNS is one of the oldest protocols of the internet. It’s a naming database that locates and translates domain names into IP addresses, similar to how a phone’s contacts list matches names to phone numbers. DNS is also one of the most utilized protocols, making it a common target of network attacks. Most internet activities, including web browsing, heavily depend on the DNS directory to quickly locate an IP address, connect with the web server, and access the website’s content. Since the DNS functions as the backbone of internet connectivity, it’s natural to assume it is designed with the utmost cybersecurity features. Unfortunately, that’s not the case. When this infrastructure was created, malicious actors and security threats were not as prevalent as today. Organizations use DNS security solutions to protect against DNS server attacks, threats, and malware such as ransomware. **What Does DNS Stand For?** DNS stands for domain name system and acts as a translator between humans and computers. It is essentially a directory of domain names mapped with each website's IP addresses. ### What are the Common Features of DNS Security Solutions? The following are some of the core features within DNS security tools that can help companies protect their networks from malicious actors: **DNS filter:** DNS filter may be one of the many features offered by this type of protection solution or the only purpose of a specific tool. It’s also referred to as DNS-layer security and can be viewed as a way to cut off threats before they can attack. In other words, it is the first line of defense against cybersecurity infiltration. DNS filtering can help blacklist malicious and phishing websites and ultimately avoid the risk of being attacked. This feature doubles as a content filtering system, enabling companies to prevent employees from accessing harmful or inappropriate web content on company-managed devices and networks. **Bot protection:** With IoT devices becoming more prevalent, bot attacks are increasing. Malicious attackers may use botnets to steal employee data, send spam, or initiate DDoS attacks. Most DNS security tools come with features to detect and mitigate botnet attacks. **Prediction capabilities:** Some DNS security solutions utilize the power of machine learning to identify and predict malicious domains. These solutions can proactively identify newly staged attacker infrastructure and block them to protect against cyber threats by analyzing internet activity patterns. **Typo correction:** DNS security solutions may have features for the typo correction, which is incredibly important as attackers may create domains with misleading names, for example, “gogle.com”, and use them for phishing attacks. ### What are the Benefits of DNS Security Solutions? DNS security systems enable organizations to add an extra layer of protection between employees and the internet. With the increasing number of remote workers, DNS security applications help secure data inside and outside the office and make it safer to promote programs such as bring your own device (BYOD). The DNS wasn’t created with security in mind, making it vulnerable to several security threats. For example, since DNS heavily depends on caching, attackers may utilize an advanced technique called cache poisoning to exploit the behavior of servers and cache to serve harmful HTTP responses to users. Most DNS security software tools are equipped with essential features to fight cache poisoning. Another way to fight cache poisoning is with the help of DNS security extensions (DNSSEC). But buyers must be mindful not to confuse DNSSEC with DNS security systems, as the former is a feature that authenticates the responses to domain name lookups. This also means that DNSSEC doesn’t provide particular privacy protection for those lookups. Instead, it prevents attackers from poisoning or manipulating the responses to DNS queries. The following are some of the notable benefits of utilizing a DNS security solution: **Filter unwanted content:** As mentioned earlier, DNS security software solutions offer filtering, which is an excellent way to block malicious websites and reduce the chance of DNS attacks. Companies can use this feature to control how employees access the web. For instance, it can block unwanted websites with adult or inappropriate NSFW (not suitable for work) content. The main benefit of this feature is that buyers can implement it without installing any specific software on the devices. **Block advertisements:** Another benefit of DNS filtering is ad blocking, which is also a type of content filtering. Ads may have malicious apps hidden inside them or could be a strategy to extract employee information. Even if there isn’t any malicious intent behind an advertisement, it can still distract employees and reduce their performance. **Uncover shadow IT:** Shadow IT, which are IT systems deployed by employees without the approval of the IT department, can cause security and compliance issues and may also increase the IT spending at a company. Unsanctioned applications are also frequently targeted by attackers. Some DNS security software products help uncover shadow IT applications and provide insights into where the employees spend the most time online. **Prevent malware downloads:** Controlling internet access also means that DNS security applications can help prevent malware downloads from hacked or malicious sites. If malware is downloaded somehow, it will typically send “callback” signals to a host server to receive further instructions. If there’s a DNS security platform in place, it can block such signals. **Integrate with ease:** DNS security solutions easily integrate with a business’s existing network security ecosystem. These products typically come with flexible APIs and can be configured and deployed effortlessly. ### Who Uses DNS Security Solutions? **IT administrators:** IT administrators, or more precisely, internal IT management departments of organizations, are the most common users of DNS security solutions. These tools help administrators secure DNS servers and protect their employees from DNS-based attacks and secure sensitive data. #### Software Related to DNS Security Solutions Related solutions that can be used together with DNS security solutions include: [DDoS protection software](https://www.g2.com/categories/ddos-protection) **:** DDoS protection software solutions help prevent DDoS attacks and secure websites and applications. They monitor web traffic and set baselines for normal traffic loads. If the traffic inflow increases rapidly, botnet attack being one reason, the web filters will redirect web traffic to a controlled source. [Website security software](https://www.g2.com/categories/website-security) **:** As the name suggests, website security software protects websites from numerous internet-based attacks. It combines the features of DDoS protection software, [content delivery networks (CDN)](https://www.g2.com/categories/content-delivery-network-cdn), and web application firewalls. [Secure web gateways](https://www.g2.com/categories/secure-web-gateways) **:** Secure web gateways enable organizations to prevent internet-based threats and can help ensure employee compliance. They can filter websites and content to identify malware, block dangerous URLs, and prevent end users from engaging with them. [Web application firewalls (WAF)](https://www.g2.com/categories/web-application-firewall-waf) **:** This tool filters and monitors incoming traffic to protect web applications against malicious traffic. These tools can inspect traffic flow at the application level and block cross-site scripting and SQL injection attacks. [Bot detection and mitigation software](https://www.g2.com/categories/bot-detection-and-mitigation) **:** Bot detection and mitigation software monitors websites, applications, and networks to identify malicious bot activity. It’s an essential tool to prevent DDoS attacks, form submission abuse, web scraping, and other bot attacks. ### Challenges with DNS Security Solutions Most DNS security products use the DNS as a low-bandwidth, low-latency, and basic filter to protect end users from phishing and other malicious attacks. Although DNS security platforms can prevent numerous cyber attacks, it can be viewed only as the first line of defense. In other words, it is only one of the many tools required to maintain a healthy and secure network ecosystem. Additionally, DNS security software systems come with numerous limitations and challenges. **End-user circumvention:** End users may try to get around the filters enforced by a DNS security tool. And in many cases, they will succeed. This is a common limitation of DNS security systems and will defeat the purpose of having such a tool in place. Of course, businesses can overcome this limitation by setting up some firewall rules. But, it is better to look at the bigger picture and understand why end users are doing it in the first place. Educating end users about the benefits of having a DNS filter can help overcome this limitation. **Registrar hijacking:** An attacker can take advantage of the weak security practices, vulnerabilities, or carelessness of an organization, which would instantly make a DNS security tool ineffective. For instance, a malicious attacker may perform social engineering on an organization’s domain registrar to ultimately perform domain hijacking. This method of domain hijacking is called registrar hijacking. ### How to Buy DNS Security Solutions #### Requirements Gathering (RFI/RFP) for DNS Security Solutions Understanding the company’s requirements by performing an internal assessment should be the first step toward buying a DNS security software solution. In other words, buyers should try to understand what the tool means to their organization. This step of understanding what a particular software should do for an organization is called requirements gathering, and its success can significantly impact the effectiveness of the chosen software solution. Along with requirements gathering, buyers should have a fair understanding of the budget to purchase the software. This will empower them to choose the best software solution that fits their needs and budget. Unlike most other software, DNS security products may have a single purpose–DNS filtering. But, depending on the use case, businesses may want the DNS security tool to perform multiple functions, including content filtering, bot protection, and typo correction. Understanding whether the company requires advanced features such as real-time threat detection, predictive capabilities, or threat intelligence is essential. Not all DNS security systems come with artificial intelligence features. #### Compare DNS Security Solutions **Create a long list** After requirements gathering, buyers should create a long list of potential DNS security software products. This initial list can include any software solutions that meet the company’s basic requirements. At this point, instead of finding the right solution, the focus should be on eliminating the products that don’t offer critical functionality. For instance, if a software product can perform DNS filtering, it should be added to this list, regardless of what else it offers. **Create a short list** A buyer can create a short list from the long list by eliminating DNS security software products that don’t meet the company’s requirements or, in other words, don’t have the must-have features. In this step, buyers can also remove software products that don’t fit their budget. To refine the list further, buyers can eliminate tools without the nice-to-have features. Companies can compare the remaining products based on usability, features, pricing, and vendor support. Ideally, creating a short list with five to seven products is better. **Conduct demos** Product demos help understand a product's usability and features. Additionally, demos help buyers compare the particular product with others on the short list. To be fair and square, buyers should test the DNS security software products using the same use cases. Along with understanding the usability, demos are useful to examine the user experience of the software, ask questions about the features buyers care the most about, and check whether the features work as advertised. #### Selection of DNS Security Solutions **Choose a selection team** Like in the case of every software product, buying a DNS security software platform is a costly decision, so buyers should ensure that the right stakeholders are present to make the decision. For this reason, the organization should assemble a selection team, which includes IT administrators, security team professionals, IT managers, and key decision-makers. The team must consist of professionals who can use the DNS security solution, scrutinize it, and check whether it meets all the requirements. **Negotiation** After finding a product that fits the criteria, buyers should discuss the terms and conditions with the DNS security software vendor and negotiate the pricing. Negotiating is possible even if a vendor has mentioned specific pricing on their website. Buyers can request to lower the price by removing certain optional features. Vendors may also offer additional discounts for multi-year contracts. **Final decision** It’s advisable to test the software on a small scale for a short period before purchasing. It’s best to involve the day-to-day users of the software in this testing phase. They can be better judges of the usability and user experience of the software and offer valuable feedback. Software vendors will offer a free, short-term product trial in most cases. If the end users and the selection team are satisfied with the software, buyers can proceed with purchasing or contracting. If not, the buyer must re-evaluate the software options.