A DNS Firewall is Essential to Your Network Security

DNS is a vector used in almost every attack, from phishing to massive-scale DDoS.

ThreatSTOP is a service that delivers threat intelligence to your DNS Servers, firewalls, routers (and more) and automates everything to proactively block threats.

Automate and Augment your DNS Threat Defense

No new hardware or software required. Deploys in under an hour via an online portal & is compatible with all major DNS servers including Windows Server 2016 and Microsoft Azure.

Get Started

Learn More

How it works?

We’re Built to Block Threats

Get Started

Learn More

Choose The Server

Pick the DNS Server you want to transform into a DNS Firewall. Select standard policies or create your own custom policy in our customer portal.

Apply The Rules

Apply any number of action rules. For example, attempts to contact botnet C&C servers can simply be denied, while users who click on phishing links see a redirection to a walled garden.

Automation Kicks In

All rules are automatically downloaded from the portal and are added to the BIND DNS server configuration files. The DNS server automatically downloads the policy and applies it to all lookups it receives.

Automatically Updated

The policy is automatically updated (by default this is every two hours) so that the policy can block new threats and no longer block access to locations that have been remediated.

We Do The Rest

RPZ takes action based on the domain name queried (QNAME), the IP address returned (RPZ IP) or the fully qualified domain name (FQDN) or IP address of any of the name servers used in the resolution process (NS IP and NS DNAME).