REAL-TIME PROTECTION
Catch threats before you see them
QueryWarden applies managed phishing and malware-domain protection, plus ad and tracker filtering, before a destination is reached.
QueryWarden DNS threat protection Private DNS firewall for compatible devices
A safer internet starts with every query.
QueryWarden filters matching malicious and unwanted domains before the destination connection. Protect compatible devices from your phone to your company network in one clear dashboard.
No credit card required Free plan available now Private encrypted endpoint
Secure connection
OVERVIEWYour network is secure.
LiveThreats blocked1,284 Last 7 days
Protected queries48.2K 99.7% safe
Resolver processing11ms
DNS trafficToday
24 hoursphishing-login-verify.coPhishing · 2 seconds ago
Blocked11 msAverage response
Threat stoppedJust now · Phone
PROTECTION SHOULD FEEL SIMPLE
The secure layer of the internet
QueryWarden makes the call at the start of every connection, stopping risky domains before they reach your device.
Your data stays yours
Your queries are never used for ads. Free accounts keep up to 48 hours, while per-profile controls can shorten, anonymize, or disable domain-level history.
Query log retentionUp to 48h
Review DNS privacy controls See the resolver time yourself
DNS caching, DNSSEC validation, and encrypted upstream transport are active now. Multi-origin failover is being built and is not yet claimed as live.
Liveaccount measurement
ONE DASHBOARD, PRIVACY-AWARE VISIBILITY
Understand the eligible DNS activity your profiles retain.
Review attributed endpoint activity, recorded blocks, and measured changes where the active privacy and retention settings preserve that evidence.
- Live DNS query stream with advanced filters
- Reports by device, domain, and block category
- Evidence-based alerts and managed reports
ILLUSTRATIVE DASHBOARDProduct preview
SearchTotal queries1.24M↑ 8.4%
Blocked18,4931.49%
Active devices283 new
Phishing8,20444%
Trackers5,92132%
Malware2,74415%
Other1,6249%
BUILT FOR EVERYONE
Protection that fits your world
Peace of mind at home. Control on every device.
Protection profiles, custom domain rules, app controls, and timezone-aware schedules are live. Household invitations and guardian roles remain on the roadmap.
- Private device DNS-over-HTTPS endpoint
- Current source-IP restrictions
- Per-device profiles and scheduled controls
Reduce risk as your business grows.
Manual Enterprise accounts now include role-based administration, managed policy, audit history, automation, reporting, and delegated child organizations.
- Manual organization management
- Multiple policies and device assignments
- SCIM, scoped API, webhooks, and SIEM export
- Provider-validated OIDC and signed roaming remain gated
SIMPLE, TRANSPARENT PRICING
Start with working protection today.
Paid prices and features below are proposed launch terms, not currently purchasable subscriptions.
Free
Essential DNS visibility and protection for one everyday device.
$0.00/ forever
No card · No trial expiryCreate free account - 1 device
- 1 protection profile
- Real-time query logs
- Up to 48-hour analytics history
- 24/7 live email intake
Personal
Planned protection for a person with multiple devices and profiles.
$2.32/ month
Planned: $27.84 billed annuallyPaid launch roadmap - Multiple devices
- Up to 5 profiles
- 7-day durable analytics
- Custom allow and block rules
- 24/7 live email intake
Planned family plan
Paid launch roadmapFamily
Planned household roles, individual policies, and schedules.
$3.92/ month
Planned: $47.04 billed annuallyPaid launch roadmap - Up to 6 people
- Multiple devices
- Family profiles and roles
- 30-day durable analytics
- 24/7 live email intake
Team
Planned centralized policy and reporting for organizations.
$2.50/ user / month
Planned: $30.00 per user, billed annually10-user minimum · $300.00/year to startPaid launch roadmap - Per-user licensing
- Multiple policies
- Role-based access
- 90-day durable analytics
- 24/7 live email intake
GOOD TO KNOW
Frequently asked questions
Have another question?
DNS responses are cached and forwarded to encrypted upstream resolvers. Your dashboard shows measured resolver time so you can verify performance on your own traffic.
You can connect a compatible browser or DNS client with its private DNS-over-HTTPS URL. QueryWarden also provides unsigned Apple configuration downloads, live-traffic setup verification, and an unsigned Linux Relay technical preview for routers and LANs. Native roaming clients remain on the published roadmap.
No. DNS queries are not sold or used to build advertising profiles. Free accounts keep no more than 48 hours, and each profile can shorten retention, anonymize history, or turn domain-level logging off. The Privacy Receipt shows the effective setting.
The Free plan has no card and no subscription to cancel. Paid self-service subscriptions are not open yet; cancellation terms will be shown in Stripe Checkout before paid launch.
Every plan includes 24/7 email intake with a target average initial response time of 30 minutes. Manually contracted Enterprise customers can arrange migration planning and separate SLA terms.
Free plan available
Start with one protected device.
The Free plan is available now. Paid upgrades remain closed until their listed capabilities and Stripe billing are live.