School / Non-profit $0.5 per endpoint Monthly billing only | MSP $1 per endpoint Monthly billing only | SMB $2 per endpoint Monthly billing only | Enterprise Custom Pricing Monthly billing only | |
|---|---|---|---|---|
general features | ||||
Block malicious domains from dozens of threat intel feeds. Includes IP level feeds that block domains that are hosted on bad hosting providers. Learn More | ||||
Block malicious domains that don’t appear in any threat intel feed using machine learning. 3 aggressiveness levels to choose from. Learn More | ||||
Choose from 20 content categories and create custom rules to fine-tune your browsing policies and make exceptions. Learn More | ||||
Block or unblock over 1000+ premade services with a single toggle switch. Learn More | 1000+ | 1000+ | 1000+ | 1000+ |
Create geo-IP based rules for queries that resolve to or from IPs within a specific country or ASN. Learn More | ||||
All modern DNS protocols are supported: DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, DNS-over-HTTPS/3. Learn More | 4 | 4 | 4 | 4 |
Legacy installations are supported for networks that can’t leverage modern Secure DNS protocols. Learn More | ||||
All DNS protocols are dual stack and support IPv4 and IPv6. Learn More | ||||
Optionally redirect domains, services or all browsing activity via proxies in 69 countries. No VPN required. Learn More | ||||
Onboard your administrators and end user using SSO. | ||||
clients & applications | ||||
Optional CLI and GUI based applications for Windows and Mac. Learn More | ||||
Optional setup helper apps for iOS and Android. Learn More | ||||
Open source single command installation DNS daemon supporting many popular router vendors and firmware. Learn More | ||||
Fully documented API access with ability to generate and invalidate own API tokens. Learn More | ||||
Custom API development for your organization. Learn More | ||||
analytics | ||||
Audit trail of all admin actions within your Organization. Search and export data. Learn More | ||||
Real time and historical DNS query log. Learn More | ||||
Raw query data is stored for a period of time for review. Learn More | 30 days | 30 days | 30 days | 30 days |
Low resolution Analytics data is stored for up to 1 year. Hourly granularity for last 1 month, and daily granularity for last year. Learn More | Up to 1 year | Up to 1 year | Up to 1 year | Up to 1 year |
Choose where your Analytics data is stored, at a per-Organization level. Learn More | 3 | 3 | 3 | 3 |
Dedicated storage regions are available in a location of your choice. | Additional Cost | Additional Cost | ||
Stream raw query data into your SIEM (Splunk or MS Sentinel). Learn More | ||||
support | ||||
Reach out to a fellow human and we’ll be happy to help you out with your unique issue. Learn More | ||||
Talk to fellow users on Reddit, and Discord. Learn More | ||||
Talk to Barry, our AI assistant, for help with your issues. Learn More | ||||
Get live help from an engineer to troubleshoot your issues. | ||||
Join our shared Slack channel for support and collaboration. | ||||
Get help with migrating from your current DNS provider to Control D. Learn More | ||||
Get a custom onboarding plan for your organization. Learn More |
Control D offers simple, endpoint-based pricing with no hidden fees. You choose a plan based on how many users/devices and features you need, then pay monthly or annually. Every paid plan includes core DNS filtering, customization options, and access to the Control D dashboard for managing rules, analytics, and profiles.
Yes. Control D offers a 14-day free trial, allowing you to try the service before upgrading. The trial includes all the features you would normally find in the paid version, making it ideal for testing the service to see if it meets your needs.
Personal plans are built for individuals and families who want better privacy, content filtering, and malware protection on their own devices and home networks. Business plans add features designed for teams and organizations: multi-user management, more granular policy control, advanced logging/analytics, and higher usage limits that scale with your company.
Yes. You can upgrade or cancel your plan at any time from the Control D dashboard. Plan changes typically take effect immediately, and you’ll see the updated billing details on your next invoice. If you cancel, your subscription remains active until the end of the current billing period.
No surprise billing. The features and limits included in each plan are clearly listed on the pricing page and in your dashboard. As long as you stay within your plan’s usage limits, you won’t be charged extra. If you start to outgrow your current plan, you’ll see options to upgrade before you hit any hard limits.
Absolutely. Control D Business is built for flexible scaling; add or remove users directly from the dashboard at any time. Billing automatically adjusts on your next invoice based on the active number of endpoints (devices connected to Control D).
No, you won’t be double-billed. For example, if you have 150 devices total and are deploying Control D to 100 devices using the daemon client, with the other 50 only connecting to the company router/firewall, you’ll only be billed for 150 devices - even if the 100 devices that are using the daemon client are connected to the same router. When setting up the router, you’ll enter 50 devices (since the 100 devices with the daemon client are already covered). This ensures you’re only charged once for each device, even when roaming devices connect to the router.