Managed threat blocking
Block managed phishing and malware-domain sources before the destination is reached.
Learn morePRODUCT FEATURES
Visible control over invisible threats.
QueryWarden analyzes DNS traffic at the edge of your network, cuts off risk before it reaches a device, and makes every decision easy to understand.
SIX LAYERS, ONE SIMPLE EXPERIENCE
What works now—and what is coming next.
Flexible policies
Build isolated profiles, custom domain decisions, app/category controls, and timezone-aware schedules.
Learn moreEncrypted DNS-over-HTTPS
Private device DNS-over-HTTPS endpoints protect queries in transit. DoT and DoQ are not public yet.
Learn moreLive analytics
Filter current query and block reports by device, status, domain, and available block category.
Learn moreSmart alerts
Evidence-based in-app stories and high-severity email alerts are available, with scoped webhooks and SIEM export for managed organizations.
Multi-origin resilience
A second independent resolver origin and health-aware failover are being built before an availability claim is published.
SETUP OPTIONS
Use the working method today.
Browser and compatible custom-DoH clients work now. Other methods stay clearly labeled until their end-to-end setup is live.
QUERYWARDEN SETUPDevice setup
Available now- 1
Create a device in the dashboard.
- 2
Copy its private DNS-over-HTTPS URL.
- 3
Paste it into a compatible browser or DNS client, then confirm traffic in Query Log.
Start a traffic check before treating the endpoint as active.
Open the complete setup guide DNS-over-HTTPS DNS-over-TLS · launch setup DNS-over-QUIC · launch setup DNSSEC validation IPv4 & IPv6
Free plan available
Start with one protected device.
The Free plan is available now. Paid upgrades remain closed until their listed capabilities and Stripe billing are live.