Encrypted DNS that stays out of your way.
Fast resolution over HTTPS and TLS, per-network filtering profiles and no query logs. Built for small teams and home labs.
Features
Everything a resolver should do, nothing it shouldn't.
One account covers every network you manage. Change a policy once and every device behind it follows.
Encrypted transports
DNS over HTTPS and DNS over TLS on every plan. Plain port 53 stays off by default.
No query logs
Queries are answered and forgotten. Only aggregate counters per profile are kept.
Filtering profiles
Combine block lists, allow lists and custom records into profiles for each network.
Low latency in Europe
Resolvers sit close to major exchange points, with a warm shared cache.
Split-horizon records
Serve internal names to your own networks without publishing them anywhere else.
Simple API
Manage profiles and records from scripts. Tokens are scoped per profile.
How it works
Set up in a few minutes.
No software to install. Point your router or devices at a personal endpoint and you are done.
Create a profile
Pick block lists and add any custom records your network needs.
Get your endpoint
Each profile has its own DoH URL and DoT hostname, tied to your account.
Point your devices
Use the endpoint in your router, browser or OS settings. Changes apply instantly.
Plans
Free while in beta.
Invited accounts keep their limits when paid plans open.
Personal
One household
- 2 profiles
- DoH and DoT
- Public block lists
Team
Offices up to 50 devices
- 10 profiles
- Split-horizon records
- API access
Custom
Larger networks
- Unlimited profiles
- Dedicated endpoints
- Custom retention
Registration is closed for now.
We are onboarding a small number of networks during the beta. Existing members manage their profiles from the account they were invited to.