# Infoblox Threat Defense

> Cloud-native DNS security with predictive threat intelligence and agentless deployment.

Infoblox Threat Defense is a DNS-layer security platform from Infoblox that blocks threats before they reach endpoints, with agentless protection across hybrid, multi-cloud, remote, IoT and OT environments. Pricing is token-based and available by quote only. Listing updated 6 September 2026. Checked by MSP Software 6 September 2026.

- Page: https://mspsoftware.net/software/infoblox-threat-defense
- Vendor: Infoblox, https://mspsoftware.net/vendors/infoblox, website https://www.infoblox.com/products/threat-defense/
- Categories: DNS and web filtering (primary)
- Free version: no.
- Deployment: cloud, on-premises and hybrid. Platforms: web. HQ: United States. Founded: 1999.
- Support: email, help desk, knowledge base and phone. Training: documentation, videos and webinars.

## From the vendor

Infoblox Threat Defense is a protective DNS and threat defence solution from Infoblox for managed service providers protecting customer networks against DNS-based attacks and intrusions. The platform operates as a cloud-native security resolver that stops attacks at the DNS layer before malicious domains can be resolved, using behavioural analysis and machine learning to identify zero-day threats without requiring endpoint agents or firewall modifications. The solution detects threats an average of 68 days earlier than competing tools, blocks approximately 90 percent of threats before the initial DNS query, and maintains a false positive rate of 0.0002 percent. Infoblox Threat Defense monitors over 204,000 active threat actor clusters and tracks 660 plus actors behind global malicious activity, using this comprehensive threat intelligence to power predictive protection across corporate systems, remote workers, IoT and operational technology environments. The platform includes lookalike domain monitoring to combat brand impersonation attacks and tracks phishing, ransomware, malware and domain generation algorithms across its extensive threat feeds. Infoblox Threat Defense deploys as cloud-first management through the Security Workspace, with optional on-premises and hybrid configurations for organisations integrating with existing DNS infrastructure. The platform provides agentless visibility across all device types without requiring agents or firewalls, eliminating implementation barriers common with other security approaches. Multi-tenant capabilities support the MSP business model with per-site policy controls and centralised visibility across customer networks and per-customer threat activity logs. Pricing is token-based rather than per-user or per-endpoint, with Infoblox directing prospective customers to sales for customised quotes based on their security requirements and deployment scale. Infoblox is based in Chicago, United States, and has been part of Vista Equity Partners since 2016.

## Our take

Infoblox Threat Defense stands out for agentless deployment and early threat detection at the DNS layer, which suits MSPs that want protection without endpoint software or firewall modifications. The token-based pricing model requires a sales conversation rather than self-service purchasing, which differs from competitors like Cisco Umbrella or Cloudflare Gateway that publish per-unit pricing. Before committing, check whether threat intelligence feeds cover your customer base geography and threat profile, and confirm integration availability with your existing RMM or security stack. The multi-tenant dashboard supports MSP operations but verify it covers your specific management and policy isolation needs.

## Pricing

Infoblox Threat Defense does not publish a list price.

## Features

| Feature | Supported | Note |
| --- | --- | --- |
| DNS-layer blocking | yes | Blocks malicious domains at DNS layer, stops 90 percent of threats before query execution |
| Content category filtering | yes | Protective DNS with category-based filtering for phishing, ransomware, malware and DGAs |
| Roaming agent for off-network devices | yes | Agentless protection across remote, hybrid and multi-cloud environments without requiring endpoint agents |
| Secure web gateway | yes | Security Workspace integration provides gateway capabilities |
| Multi-tenant dashboard | yes | Multi-tenant management through Security Workspace for MSP operations |
| Per-site policy | yes | Cloud and on-premises hybrid deployment supports per-network policy control |
| Threat intelligence feed | yes | Monitors 660 plus threat actors and 204,000 plus threat actor clusters with predictive intelligence |
| Reporting and audit log | yes | Reporting and audit capabilities through Security Workspace |
| Custom block and allow lists | yes | Implied through security ecosystem integration and policy configuration capabilities |
| Network-wide router deployment | yes | Network-wide protective DNS resolver deployment across cloud, on-premises and hybrid infrastructure |

## Integrations

- Infoblox DDI, https://www.infoblox.com/products/ddi/
- Microsoft 365 and Defender, https://www.infoblox.com/products/threat-defense/
- Infoblox Partner Ecosystem, https://www.infoblox.com/partners/

## Alternatives

- Cisco Umbrella: Cloud DNS filtering and secure web gateway for multi-site networks and roaming users. https://mspsoftware.net/software/cisco-umbrella
- Cloudflare Gateway: DNS and web gateway filtering via Cloudflare's global edge network, with policy-based access control. https://mspsoftware.net/software/cloudflare-gateway
- DefensX: Browser security with AI protection and DNS filtering for MSPs, quote-only pricing with flexible tiers. https://mspsoftware.net/software/defensx
- DNSFilter: AI-powered DNS filtering and threat blocking for networks and roaming devices. https://mspsoftware.net/software/dnsfilter. Compare: https://mspsoftware.net/compare/dnsfilter-vs-infoblox-threat-defense

## FAQ

### How much does Infoblox Threat Defense cost?

Infoblox Threat Defense does not publish a list price. No MSP price reports have been approved yet.

### Does Infoblox Threat Defense offer a free trial?

There is no free version.

### What does Infoblox Threat Defense integrate with?

Infoblox Threat Defense lists integrations with Infoblox DDI, Microsoft 365 and Defender and Infoblox Partner Ecosystem.

### Is Infoblox Threat Defense cloud or on-premises?

Infoblox Threat Defense can be run in the cloud or on-premises. Infoblox Threat Defense supports a hybrid deployment.

### Who is Infoblox Threat Defense for?

MSPs report using Infoblox Threat Defense at sizes of 6-15, 16-50, 51-200 and 200+ technicians.

### How does Infoblox Threat Defense differ from network-based firewalls?

Infoblox Threat Defense operates at the DNS layer rather than the network perimeter, blocking malicious domains before they are resolved rather than filtering traffic after connection. This approach does not require endpoint agents or firewall modifications and works agentlessly across corporate systems, remote workers, IoT and OT environments. Infoblox Threat Defense detects threats an average of 68 days earlier than competing solutions by using predictive threat intelligence and behavioural analysis.

### What deployment options does Infoblox Threat Defense support?

Infoblox Threat Defense deploys as cloud-first management through the Security Workspace, with optional on-premises and hybrid configurations. Organisations can integrate Infoblox Threat Defense with existing DNS infrastructure in hybrid environments, providing flexibility for organisations that need to split operations between cloud and on-premises deployments. The platform works agentlessly across all device types without requiring additional software installation on endpoints.

### How is Infoblox Threat Defense priced?

Infoblox Threat Defense uses token-based licensing rather than traditional per-user or per-endpoint pricing. Customers purchase token packs for a contract term and can adjust usage as needs change. Specific pricing is not published on the website; Infoblox directs prospective customers to contact sales for customised quotes based on their requirements. The token-based model allows capacity to be exceeded temporarily without penalties.

### Does Infoblox Threat Defense support multi-tenant management for MSPs?

Yes, Infoblox Threat Defense includes multi-tenant management capabilities through the Security Workspace, allowing managed service providers to manage multiple customer environments from a single dashboard. This supports the MSP business model by providing per-site policy controls and centralised visibility across customer networks and threat activity.

### What threat intelligence does Infoblox Threat Defense provide?

Infoblox Threat Defense monitors over 660 threat actors and 204,000 active threat actor clusters to power its predictive threat intelligence. The platform blocks approximately 90 percent of threats before the initial DNS query, maintains a false positive rate of 0.0002 percent, and detects threats an average of 68 days earlier than competing tools. Threat intelligence includes lookalike domain monitoring to detect brand impersonation attacks.