DNS Defense
by ThreatSTOP
Protective DNS for any DNS server, including BIND, Windows DNS and Infoblox, that blocks malware, ransomware and phishing lookups before they resolve.
How MSPs use it: run it yourself or resell it
About
DNS Defense is a SaaS service that works on the DNS systems you have already, or will in the future, including Active Directory, BIND, and more.
Overview
ThreatSTOP DNS Defense turns the DNS server you already run into a protective DNS checkpoint. Every outbound lookup is checked against ThreatSTOP threat intelligence in real time before it resolves, so connections to malicious domains used for malware, ransomware, phishing and command-and-control callbacks are blocked while legitimate domains resolve normally.
It works with BIND, Windows DNS, Infoblox and other DNS servers, with no new hardware to buy. The ThreatSTOP console shows allow and block verdicts for lookups, and reporting covers every blocked threat and the device that made the request. ThreatSTOP also offers a hosted DNS Defense Cloud version and a Route 53 option for AWS. It suits MSPs that run client DNS servers and want to add threat blocking at that layer.
Sources
AI & Automation
Blocks known malicious domains as a cloud-based DNS firewall with automated threat intelligence and API integration.
Selling this to clients
MSPs both run this and sell it: you hold the console, the client pays for the seats or the service built on it.
- DNS filtering for MSPs: 27 products comparedBuyer's guide for this category, with how to package it and what clients hear · 9 min read
- Quote and bundle it in your proposals with SalesbuildrService catalog, live distributor pricing, quotes straight into your PSA.
ThreatSTOP
7 products · View profile
Small · 11-49 employees · 17y in business
Updated Nov 9, 2026