Control D
Encrypted DNS filtering for businesses, MSPs and schools on every OS
Own Control D? Claim it, free to correct the facts and get the verified badge.
Pricing
From $2/mo
Free trial
Yes
API
Yes
Company
Control D, Inc.
Platforms
What is Control D?
Control D is a DNS filtering service that blocks malware, phishing, trackers and unwanted content at the DNS level. It supports DNS-over-HTTPS (including HTTP/3), DNS-over-TLS, DNS-over-QUIC and legacy DNS, and it has clients for Windows, Mac, Linux, iOS, Android and routers.
Admins set one policy and it applies across all devices. The rule options are 20 content categories, more than 1,000 services you can block with a toggle, geo-IP rules and custom rules. A machine-learning layer catches malicious domains that aren't on any threat feed yet. You can also route specific domains or services through proxies in 69 countries. Every plan keeps 30 days of query logs and up to a year of analytics, and includes API access.
Control D fits IT and security teams that need SOC 2 evidence, MSPs that manage many client fleets from one multi-tenant dashboard, and schools or non-profits, which get discounted rates. Self-serve SMB pricing is per endpoint.
Key features
- ML-based malware and phishing domain blocking
- 20 content categories plus custom rules
- One-toggle blocking for 1,000+ services
- DoH, DoH/3, DoT, DoQ and legacy DNS support
- Traffic redirection via proxies in 69 countries
- 30-day query logs and 1-year analytics
- SIEM streaming to Splunk or MS Sentinel
- Multi-tenant dashboard with API and CLI
Use cases
Who it's for
Protecting a mixed-OS workforce
IT teams apply one DNS policy across Mac, Windows, Linux and mobile devices. Query logs can be exported as SOC 2 audit evidence.
MSP client management
Managed service providers run each client's filtering profile and billing from one multi-tenant dashboard.
School content filtering
K-12 schools and libraries filter content and block malware at a discounted rate.
Restricting AI agent internet access
Teams limit AI agents to the domains they need and log every lookup.
Control D pricing
From the vendor's site, checked Nov 8, 2026. Prices change — confirm on their pricing page.
| Plan | SMB | School / Non-profit | MSP / Channel | Enterprise |
|---|---|---|---|---|
| Price | $2/moper endpoint | Custom quote | Custom quote | Custom quote |
| Real-time analytics | Yes | Yes | — | — |
| Also |
|
|
|
|
| Cost for a team, per month | 1 person | 5 people | 20 people |
|---|---|---|---|
| SMBper seat | $2 | $10 | $40 |
Billed yearly where the plan offers it. — means the plan doesn't allow that many people.
Which plan do you need?
- NextDNSPro$1.66/mo
- Control DSMB$2/mo
The cheapest paid plan with a published price that fits. Custom and sales-quoted plans aren't included.
Cost over 2 years: $6012 × $2.5 + 12 × $2.50 after renewal. Worked out from the figures in Control D in numbers below.
Get an email when Control D changes its prices
One mail per change, a stop link in each. Nothing else.
Control D in numbers
- Monthly plan
- $3
- Best intro price
- $2.50
- Intro term (months)
- 12
- Renewal per year
- $30
- Money-back (days)
- 7
- Devices at once
- Unlimited
- Server countries
- 69
- Jurisdiction
- Canada (Ontario)
- Free plan
- Yes
- Pay with crypto
- Yes
Control D is a DNS filtering and proxy service, not a traditional VPN; the cheapest paid tier (Some Control, $3/mo or $30/yr) has no proxy locations, which require Full Control ($6/mo or $60/yr), and the free option is public DNS resolvers without the dashboard. From Control D's own pages, checked Nov 8, 2026. Each figure links to the page it is from; fields the vendor doesn't state are left out.
How Control D compares
- Control D has no free plan, while all 4 alternatives below have one.
- It offers an API, which only 1 of the others does.
| Tool | Cost over 2 years | Best intro price | Renewal per year | Latest no-logs audit | Server countries | Devices at once | |
|---|---|---|---|---|---|---|---|
| CControl D | $60 | $2.50 | $30 | — | 69 | Unlimited | |
N NextDNS | $39.82 | $1.66 | $19.90 | — | — | Unlimited | Control D vs NextDNS |
A AdGuard DNS | — | — | — | — | — | — | Control D vs AdGuard DNS |
Q Quad9 | — | — | — | — | — | — | Control D vs Quad9 |
P Pi-hole | — | — | — | — | — | — | Control D vs Pi-hole |
Figures from each vendor's own pages; — means the vendor doesn't state it. The closest alternatives in our directory by category. “Starts at” is the cheapest paid plan per month, as each vendor lists it.
Pros and cons
Strengths
- Low self-serve price of $2 per endpoint per month
- 14-day free trial with no credit card
- Native clients for all major desktop and mobile OSes
- API access and 30-day query logs on every plan
Limitations
- MSP, school and enterprise pricing requires contacting sales
- Live engineer sessions, Slack support and migration help are limited to higher tiers
- Custom storage regions cost extra
Control D FAQ
How much does Control D cost?
The self-serve SMB plan costs $2 per endpoint per month. School, non-profit, MSP and enterprise pricing is quoted on request.
Is there a free trial?
Yes. The 14-day trial includes all paid features and does not require a credit card.
Which platforms are supported?
Windows, Mac, Linux, iOS, Android and routers. Network-level deployment needs no agent.
Am I billed twice for a device covered by both the router and a client?
No. Each device is billed only once.
Can I cancel anytime?
Yes. There is no annual lock-in, and the subscription stays active until the end of the billing period.
Used Control D? Rate it
Sign in to rate this tool and share how you use it.
Control D
From $2/mo
Tools similar to Control D
Ad, tracker and phishing blocker for desktop, mobile, browsers and networks