Stop threats
before the
connection.
VeraDNS inspects every DNS query on your network and blocks malware, phishing, ransomware and C2 the instant it's requested — entirely on your own infrastructure.
Trusted by security & network teams worldwide
DNS filtering at the
network level.
Zero agents. Zero client software. VeraDNS evaluates every DNS query against your policies, blocklists and threat intelligence before a single connection is made.
Deploy on your infra
Install via Docker on your own server or VM, then point your network's DNS to VeraDNS. No data ever leaves your environment.
Every query inspected
Each DNS request is evaluated against your security policies, blocklists and access rules — in real time, at the resolver.
Threats blocked instantly
Malware, phishing, trackers and policy-violating domains are stopped before a connection is established — for every device at once.
Full visibility & audit
Every query, block and admin action is logged. Investigate incidents, generate reports, and demonstrate compliance on demand.
One platform. Every DNS control.
From network-wide filtering to compliance reporting — everything your team needs to secure DNS, running entirely on your own infrastructure.
Network-wide filtering
Filter every DNS query for every device — users, servers, IoT and OT — with no endpoint agents to install or maintain.
Real-time threat intel
Auto-updating feeds block malware, phishing, ransomware and C2 domains the moment they're known — no manual upkeep.
Role-based access
Admin, Editor and Viewer tiers — enforced at the API layer with JWT auth, not just hidden in the interface.
Programmable policy
Define allow/block rules by category, group, client or time window — and roll them out across your whole estate instantly.
One-click compliance
Branded executive reports mapped to NIST 800-53, CIS v8, ISO 27K and NCSC — generated locally, never sent off-box.
Complete query log
Every request — domain, client, type, status, answer, latency — searchable live, with time-series trends.
SIEM & API export
Stream audit and query logs to Splunk, Sentinel or Elastic via REST in JSON or CSV — your data, your pipeline.
Encrypted DNS
Standard DNS, DoH, DoT and DNSSEC validation — enforce encrypted transport for internal clients to stop interception.
Self-hosted & sovereign
Runs on-premise, in your private cloud or your own VMs. No third-party dependency, no external query visibility.
Role-based access, enforced at the API level.
Manage your team with built-in RBAC. Admins configure everything; Editors manage policy; Viewers get read-only. Permissions are enforced at the API layer — not just the interface.
Three role tiers — Admin, Editor and Viewer, each with clearly scoped permissions.
API-level enforcement — permissions can't be bypassed through the UI or direct API calls.
JWT authentication with secure HttpOnly cookies and configurable session expiry.
Every permission change is recorded in the audit log automatically.
Compliance reports ready to send. One click.
Generate branded executive reports as PDF, CSV or HTML in a single click — mapped to NIST 800-53, CIS v8, ISO 27K and NCSC. Ready to hand to your auditor today.
DNS Security Posture report — resolution outcomes, latency and top talkers, with severity ratings.
Identity & Access report — every admin action, user change and login attempt in one export.
Generated locally — every export is produced on your own infrastructure, never sent off-box.
See every query. Catch every threat. In real time.
VeraDNS gives your team complete, live visibility into every DNS request on your network. Track total queries, blocked percentages, dangerous domains and resolver health as it happens.
Live query stream — domain, country, client, type, status, answer IP and latency, all searchable.
Risk scoring — a live posture score with breakdowns by category and client.
Drill-down analytics — group, break down and filter by status, then visualise on a world map.
Plans for every scale of deployment.
Three packages that scale with your network, plus optional security add-ons. Every plan runs on your own infrastructure.
For small teams and single-site offices getting started with network-wide DNS security.
For growing organisations needing higher throughput, richer threat feeds and SIEM integration.
For large enterprises and MSPs needing maximum scale, custom integrations and 24/7 SLA support.
Optional modules — add to any package
Layer on deeper protection and insight, on top of any plan.
Advanced Threat
Deeper threat intelligence, malware sandboxing and command-and-control (C2) detection beyond the standard feeds.
Advanced Analytics
Extended dashboards, behavioural anomaly detection and custom report builders for your SOC team.
Frequently asked questions.
Ready to secure your network
at the DNS layer?
Request a 7-day trial and speak with our team. No commitment required.
