VeraDNS is an enterprise DNS filter that blocks threats before a connection is ever made — network-wide, zero agents. Role-based access, Cloudflare threat intelligence, and compliance-ready audit reports built in.
Zero agents. Zero client software. VeraDNS filters every DNS query on your network before a connection is ever made — every device protected automatically.
Install VeraDNS on your own server or VM using Docker. Point your network's DNS to VeraDNS. No data ever leaves your environment.
When any device makes a DNS request, VeraDNS evaluates it against your security policies, blocklists, and access rules in real time.
Malware, phishing, trackers, and policy-violating domains are blocked before a connection is established — protecting all devices simultaneously.
Every query, every block, every admin action is logged. Use the dashboard to investigate incidents, generate reports, and demonstrate compliance.
Manage your team with built-in Role-Based Access Control. Admins can configure everything; Viewers have read-only access. Permissions are enforced at the API layer — not just the interface.
Three role tiers: Admin, Editor, and Viewer — each with clearly scoped permissions.
API-level enforcement: Permissions cannot be bypassed through the interface or direct API calls.
JWT authentication with secure HttpOnly cookies and configurable session expiry.
Every permission change is recorded in the audit log automatically.
Generate branded executive reports as PDF, CSV, or HTML in a single click. Mapped to NIST 800-53, CIS V8, ISO 27K, and NCSC. Ready to hand to your auditor today.
DNS Security Posture Report: resolution outcomes, latency, and top talkers — branded PDF/HTML with cover page and severity ratings.
Identity & Access Security Report: every admin action — user CRUD, group changes, login attempts — all in one export.
Stored locally, never off-box. Every export generated on your own infrastructure — no data sent to external servers.
Compliance mapped: NIST 800-53 · CIS V8 · NSA CSI · ISO 27K · NCSC — control references included in each report.
VeraDNS gives your team complete visibility into every DNS request on your network — live. Track total queries, blocked percentages, dangerous domains, and your system's Risk Score, all updating every few seconds.
Live DNS Flow Map: animated visualisation of every query — clients to resolver to destinations — with allow/block status at a glance.
Powered by Cloudflare Radar: global threat intelligence classifies every domain — Malware, Phishing, C&C, Spam — automatically, in real time.
Filter and export by client IP, domain, status, query type, or custom time range — CSV, PDF, or HTML.
Built for IT teams: trace any suspicious lookup back to the source device in seconds, without searching through logs manually.
From network-wide filtering to compliance reporting — everything your team needs to secure DNS, running entirely on your own infrastructure.
Block threats before a connection is ever made — every device on your network, zero agents required.
15+ categories from URLhaus, Phishing.army, ThreatFox, HaGeZi, OISD & TTC-CERT — updated automatically.
Radar, Domain Intel & URL Scanner classify every domain — auto-block when risk ≥ 80/100.
DoH, DoT & DoQ alongside plain DNS. Let’s Encrypt, Internal PKI or ZeroSSL certificates.
Write your own rules (||domain^), quick-block services, and test any domain instantly.
Live Cloudflare Radar world map — most-attacked regions, DDoS types and WAF activity.
Stream query and audit logs to your SIEM platform for centralised security monitoring.
Linux + Docker, fully on-premise. Up and running in under an hour, in any environment.
Upstream resolvers, DHCP, per-client policies and DNS rewrites — all in one console.
Three packages that scale with your network — plus optional security add-ons. Every plan runs on your own infrastructure; contact us for tailored pricing.
Best for small teams and single-site offices getting started with network-wide DNS security.
Best for growing organisations that need higher throughput, richer threat feeds, and SIEM integration.
Best for large enterprises and MSPs needing maximum scale, custom integrations, and 24/7 SLA support.
Layer on deeper protection and insight, on top of any plan.
Deeper threat intelligence, malware sandboxing and command-and-control (C2) detection beyond the standard feeds.
Extended dashboards, behavioural anomaly detection and custom report builders for your SOC team.
Request a 30-day trial and speak with our team. No commitment required.