SD
Secure DNS
Part of the same managed service family as MX-Relay
Log in
Managed internet security

Secure DNS protects users and systems from the very first lookup.

Detect, block, and prevent connections to malicious domains before payloads become active or data leaves your network. Secure DNS protects users, servers, printers, scanners, and other network components through a managed DNS layer that stays quick to deploy.

Immediately visible

What Secure DNS actually does

Managed
Filtering
Threat feeds, allow and deny lists, and temporary NRD protection
Visibility
Blocked queries, top domains, client IP context, and direct dashboard insight
Management
Fast to deploy, system agnostic, and ready to grow toward multi-tenant or white-label
Blocking
24/7

DNS-layer protection for users, servers, scanners, IoT, and scripts.

NRD-window
<24h

New or newly seen domains can be treated more strictly for a limited period.

Deploy
1 VPS

A simple MVP design with a growth path toward more tenants and more nodes.

Why Secure DNS

Many attacks do not begin in a firewall or browser, but earlier, at the DNS request itself. That is exactly where Secure DNS adds a practical security layer with 24/7 monitoring, direct blocking, and room for customer-specific allow or deny listing. Not as a loose gadget, but as a managed service that fits email, hosting, and infrastructure operations.

Block earlier

Before a session really starts

By filtering at DNS level, malicious traffic is stopped early, before browsers or applications keep talking to the target or payloads can activate.

Less operational overhead

Compact and explainable

Proven open-source components, simple scripts, and a separate dashboard keep the service manageable, reproducible, and quick to implement.

More trust

A natural fit next to MX-Relay

For customers, it feels like the same quality line: managed, technically solid, clearly explained, and focused on continuity.

Key benefits

Secure DNS is designed as a practical protection layer that fits day-to-day operations: low friction, more control.

Threat feeds without overengineering

Public feeds are processed locally into a clear policy layer that can later be refined per customer.

NRD protection as an extra brake

New or newly seen domains are often attractive for phishing campaigns. Secure DNS can treat them more strictly for a limited period and then reassess them.

Logging and blockpage in the same flow

Blocked queries, categories, and top domains become visible in a dashboard that can later be extended with more context or SOC workflows.

Built for managed services

The service fits MSPs, hosting providers, and internal IT teams that prefer delivering a product instead of a loose collection of tools.

Platform status

Ready for production environments

Secure DNS is practical for organizations that want to add confidence to internet traffic while keeping the service easy to manage and explain.

IT-teams
Control

Protect workstations, printers, servers, scanners, and scripts from a central resolver without requiring separate agents as a baseline.

MSP's
Service

Offer DNS protection as an additional managed security layer to customers, with room for future custom allow and deny lists.

Hosting
Oversight

Keep outbound platform traffic to risky domains under control and make suspicious DNS patterns visible sooner.

Use cases

Management

Office and user traffic

Reduce click risk from phishing emails and malicious links before browsers or clients keep connecting.

Servers, scripts, and applications

See which domains are requested by systems and catch suspicious outbound requests early.

Roaming and customer environments later

The control plane is ready for further expansion into portal integration, customer policies, and white-label scenarios.

Technical benefits and operations

The technical stack is intentionally compact: solid enough for production, but simple enough to maintain, document, and harmonize across brands later on.

Resolver and policy in one clear chain

Unbound, local policies, feed ingest, and a compact policy generator provide predictable behavior and a reproducible VPS setup.

Dashboard with staged management

Blocked queries, top domains, and whitelist or blacklist management are kept separate from the core, making them suitable for later portal integrations, SOC workflows, or brand expansion.

Block page and reason mapping

Blocked domains can be sent to a clean block page with domain and category details, consistent with the overall service experience.

Ready for portal and brand expansion

The control plane is ready for deeper integration with MX-Relay or another brand, and can later support protection beyond the fixed network as well.

Ready for the next step?

Laat Secure DNS aansluiten op dezelfde managed kwaliteitslijn als MX-Relay.

We are happy to show how Secure DNS fits your infrastructure, customer environment, or managed portfolio. Technically grounded, calmly presented, and without unnecessary complexity.

A strong fit for
  • Managed email and security services
  • MSP and reseller environments
  • Hosting and server platforms
  • Organizations that need centralized control