DNSFilter is a cloud-based DNS filtering service from DNSFilter that blocks malicious and unwanted websites before a connection is made, using machine-learning categorisation, with policy applied both on and off the client network through roaming clients. Pricing starts from $1.00 per user per year (checked September 2026).
Listing updated . Checked by MSP Software .
DNSFilter is a cloud-based DNS filtering service that blocks malicious and unwanted destinations at the DNS layer before a connection is even made, using machine-learning content categorisation rather than a static blocklist. It applies policy both on and off the client network through lightweight roaming agents installed on laptops, and at the DNS layer for all network traffic through router or network settings changes.
It suits MSPs of most sizes who want a quick-to-deploy layer of protection against phishing and malware domains without touching every endpoint individually. A site can typically be pointed at DNSFilter through a router or DNS setting change in minutes rather than requiring a full agent rollout. It fits well alongside an existing RMM and PSA stack rather than requiring a particular one, and works for both single-site clients and organisations with many locations that need consistent policy applied everywhere.
Pricing is published in tiers on DNSFilter's own site rather than quote-only, starting from $1.00 per user per year on its lowest published tier (Core), which lets an MSP model margin before a sales conversation instead of waiting on a quote (checked September 2026). A free trial of 14 days is available with no credit card required; there is no free version. DNSFilter integrates with major RMM and PSA platforms including ConnectWise, Autotask, Halo and Kaseya for deployment and billing automation, and its multi-tenant dashboard lets a technician review policy and threat activity across every client site from one screen rather than logging into each site separately. MSPs comparing DNSFilter against Cisco Umbrella, or against a DNS filtering module bundled into a broader security suite such as Todyl, should check which published tier actually includes roaming client support and the reporting depth they need, since the entry-level tier is priced lower than what most MSPs will actually deploy.
OpenText Core DNS Protection DNS-layer threat blocking with agent-based enforcement for remote and hybrid endpoints. No reviews yet vs OpenText Core DNS Protection
Cisco Umbrella Cloud DNS filtering and secure web gateway for multi-site networks and roaming users. No reviews yet vs Cisco Umbrella
Infoblox Threat Defense Cloud-native DNS security with predictive threat intelligence and agentless deployment. No reviews yet vs Infoblox Threat Defense
Heimdal DNS Security Enterprise DNS filtering and threat detection with cloud and endpoint deployment for MSPs. No reviews yet vs Heimdal DNS Security| Feature | Supported | Note |
|---|---|---|
| DNS-layer blocking | yes | Blocks at DNS layer before connection |
| Content category filtering | yes | 40+ content categories with granular control |
| Roaming agent for off-network devices | yes | Lightweight roaming client for off-network protection |
| Secure web gateway | unknown | Not explicitly documented |
| Multi-tenant dashboard | yes | Multi-tenant MSP dashboard with unified view |
| Per-site policy | yes | Per-site policy and universal lists |
| RMM integration | yes | Integrates with ConnectWise, Autotask, Halo, Kaseya, others |
| Threat intelligence feed | yes | Machine-learning threat detection, malware domain protection |
| SafeSearch enforcement | unknown | Not explicitly documented |
| Reporting and audit log | yes | Real-time reporting dashboards and logging |
| Custom block and allow lists | yes | Universal lists for domain blocking and allowing |
| Network-wide router deployment | yes | Router or DNS setting deployment |
| Feature | Supported |
|---|---|
| Automatic network discovery | unknown |
| Topology mapping | unknown |
| Device configuration backup | unknown |
| Uptime and outage alerting | unknown |
| Bandwidth monitoring | unknown |
| SNMP support | unknown |
| Wireless and access point monitoring | unknown |
| Configuration change detection | unknown |
| Multi-site dashboard | unknown |
| Documentation integration | unknown |
| Remote access to devices | unknown |
| Hardware probe option | unknown |
DNSFilter protects roaming devices when the roaming client is deployed on a device. DNSFilter applies the same DNS-layer filtering policy whether a laptop is on the client's office network or connecting from home, a coffee shop or a client site elsewhere, using a lightweight agent rather than relying on the router alone. MSPs should confirm which pricing tier includes roaming client support before quoting a client that has remote or hybrid staff, since the entry-level Core tier may not include this feature.
DNSFilter publishes its pricing in tiers directly on its website, so an MSP can see the cost per user before a sales conversation, unlike Cisco Umbrella, which is quoted through a partner or distributor. DNSFilter pricing starts at $1.00 per user per year on the Core tier and $2.25 per user per year on the Plus tier (checked September 2026). This makes DNSFilter easier to model into a client quote quickly, though MSPs should still check which tier includes the specific features, such as roaming protection, that a client needs.
DNSFilter does not need an agent on every endpoint for basic site-level filtering. The service can apply DNS-layer filtering by simply pointing a site's network to DNSFilter through a router or DNS setting change, which protects all traffic without touching individual endpoints. A lightweight roaming agent is only needed on devices that need protection away from the site, such as laptops used at home or on the road, and only the Plus tier and higher include roaming client support.
DNSFilter's multi-tenant dashboard is built for MSP use, so a technician can review filtering policy and threat activity across every client site from a single screen, rather than logging into a separate console per site. This is the normal way MSPs operate DNSFilter across a client base, and it integrates with major PSA platforms including ConnectWise, Autotask, Halo and Kaseya so that billing and deployment can be automated.
DNSFilter supports a roaming client for off-network protection on multiple platforms, including Windows, macOS, iOS and Android. The service also provides web access to the dashboard. However, specific platform support and system requirements were not documented on the public website; MSPs should contact DNSFilter directly at +1 (877) 331-2412 to confirm compatibility with their client's specific operating systems and devices.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
