top of page

Protective DNS

DigitalStakeout PDNS is a cloud-delivered DNS security platform that gives any organization granular control and visibility over endpoint DNS resolution.

  • Protect, monitor and investigate endpoint DNS traffic.

  • Defend endpoints from ever resolving new domains and DGAs.

  • Forward passive DNS logs to your XDR or SIEM in real-time.


Instant Proof of Value. Start for Free. Implement in Minutes.



  • Protect against phishing, ransomware and other malware.

  • Proactive defense from new and dynamically generated C2 domains.

  • Continuous protection from millions of low reputation domains.

  • Granular control of security policies, block pages and advanced security features.


  • Dual stack protective DNS support for IPv4 and IPv6.

  • DoH and DoT support for browser-based deployments.

  • Off-network roaming client to protect end-users wherever they go.

  • Multi-tenant design to support any type of organization or service provider.


  • Low-latency 100% highly-available global anycast network across 30+ regions.

  • Fallback to a protected network with DNS service DDoS mitigation.

  • Use up to 4 DNS pairs to support multiple polices and zones from one source IP.

  • Publish security policies to take effect across our global network in 10ms.

DigitalStakeout PDNS Feature Tour

Anycast Network

DigitalStakeout PDNS is delivered on a 100% uptime global anycast network.

Cloud Delivered

Secure your network against malicious or unwanted websites while being user-friendly and easy to manage.

DNS over TLS

DigitalStakeout PDNS supports DNS over TLS (DoT) by default and it is being widely adopted as standard for securing the DNS traffic.


Enforce DNSSEC to prevent endpoints from DNS poisoning and spoofing.

Dual Stack IPv4 IPv6

Protective DNS that blocks malicious activity from domains pointed to IPv4 and IPv6 addresses.

Log Fowarding

Forward and centralize your PDNS data to the XDR, SIEM or Log Analysis tool of your choice.


Leverage multi-tenant options to segregate DigitalStakeout PDNS by customer, organization or other logical segregation option of your choice.

Pager Duty

Remediate endpoints incidents quickly with a PagerDuty integration.

Static IP Protection

Protect endpoints behind a static IP from resolving malicious domains.

White-label Branding

Brand your Protective DNS service as your own and provide a seamless and consistent experience for your clients.

Block Page

Customize the block page users see when a security policy prohibits access to a website or domain with DigitalStakeout PDNS.

Custom Block Lists

Block or allow the assets you want your endpoints to resolve on the Internet.

DNS-over-HTTPS (DoH)

DNS-over-HTTPS (DoH) DoH deployment is a zero-software option for an off-network endpoint that needs immediate protection.

Domain Rank

Defend aginst the risk of endpoints accessing new, low traffic, poor reputation and programmatically generated domains.

Grey Wall

Change the rules of engagement with instantly blocking low trust domains.


Obtain a complete visibility of DNS traffic to build a holistic view of your threat landscape.

Off-Network Clients

Protect endpoints wherever they go off the network.

Security Policies

You are in 100% control as to how DigitalStakeout PDNS protects you deployment.

Usage-Based Pricing

Usage based pricing provides you the flexibility, cost savings, scalability, and predictability and eliminates wasted seats.

Get started, create a Free PDNS account now.

bottom of page