DNS Relay

Every device on your network resolves names through DNS, which makes it a natural place to stop malicious software before it connects. DNS Relay is our DNS proxy: it intercepts and filters DNS requests to block harmful domains, while an API gives your team complete control of the records you manage.

Why teams choose DNS Relay

Malware, ransomware, and cryptominers all need to resolve a domain before they can phone home — and they do it from every endpoint you operate, not just your servers. A DNS-level control point lets you enforce policy once, at the resolution layer, and have it apply to every device, current and future, without deploying an agent per platform. At the same time, DNS is often one of the most manually managed parts of an infrastructure; DNS Relay brings that management under the same API-driven, auditable discipline as the rest of your stack.

Capabilities

• Endpoint protection — filters DNS requests and blocks access to known-malicious domains, securing browsing and device activity network-wide.
• API-driven management — automate DNS entry creation and updates through a clean, user-friendly API, so record changes are scripted, reviewable, and repeatable.
• Drop-in deployment — integrates into existing network infrastructure without redesigning your environment.
• Scalable and reliable — sized to protect fleets of endpoints as your organization grows.

How it works

DNS Relay sits between your endpoints and upstream resolvers. Every name-resolution request passes through it: legitimate queries are answered and forwarded as usual, while requests for known-malicious domains are blocked before any connection can be made. Your team manages the relay's records through its API — adding, updating, and retiring entries from the same scripts and pipelines that manage the rest of your infrastructure.

Deployment and operations

Deploy DNS Relay at your network edge or data center and point your endpoints at it as their resolver; no per-device software and no firewall rules change. The API surface is designed for automation, so onboarding new services, rotating records, and auditing who changed what all flow through your existing tooling. It is a single, controllable layer of endpoint security that also streamlines day-to-day DNS operations.