The API is documented as unversioned.
Automations built against it may need maintenance if the API changes.
Evidence source ↗
Control D
Control D is a DNS filtering service for blocking threats, unwanted content, and selected services. Paid plans add custom policies, device profiles, analytics, and optional traffic redirection.
Editorial overview
Aggregated Overview
The product documents broad DNS filtering, device-level policies, multiple setup methods, and optional traffic redirection. Public G2 evidence is limited to five reviews, so sentiment and usability assessments have limited confidence.
This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.
Control D Decision Snapshot
A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.
Best suited to
Households and small teams seeking DNS-level filtering, custom rules, profiles for different devices, and optional traffic redirection.
Look elsewhere if
Organizations that need DNS query analytics through the public API should verify fit carefully; current API documentation warns that the API is unversioned, and public documentation does not describe analytics-query endpoints, and should evaluate alternatives such as AdGuard DNS or DNSFilter instead.
Platforms
Android, iOS, macOS, Web, Windows
TechZella assessment
7.9/10
Overview
Control D is a cloud-managed DNS service for applying filtering rules to devices, networks, and profiles. It can block domains, categories, and named online services, while allowing administrators to review DNS activity when analytics are enabled.
Deployment can use device-specific DNS resolvers, desktop clients, mobile setup helpers, DNS profiles, or router configuration. This makes the product suitable for household filtering and organizational DNS policies, but buyers should check each device and browser setup to ensure queries use the intended resolver.
Some Control and Full Control are the personal plans listed by Control D. Full Control adds traffic redirection; business customers can select a published SMB plan or contact the vendor for other organizational plans.
Control D — What Sets It Apart?
These are the product-specific differences that may matter when deciding whether the software fits your workflow. They are based on documented evidence rather than a universal ranking.
- Supports DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and legacy DNS configurations.
- Lets administrators apply different DNS rules to profiles and endpoints, with rules for categories, individual services, and domains.
- The Full Control personal plan adds DNS-based traffic redirection through proxy locations.
7 key claims verifiedOur editorial team checked this profile against pricing information, product documentation, vendor documentation. Supported by 6 documented sources.
Control D Pros & Cons
Pros
- Supports multiple encrypted DNS protocols and several device configuration approaches.
- Provides per-device endpoints, profiles, custom domain rules, and service filtering.
- Publishes personal and SMB pricing and offers a no-card business trial.
- Offers optional DNS-based traffic redirection on Full Control.
Cons
- DNS filtering is not a substitute for endpoint protection or application-level content blocking.
- The public API is unversioned according to its documentation.
- Analytics can retain DNS query data when enabled, so logging and storage settings require review.
- Some devices or browsers may need additional configuration to avoid bypassing the configured DNS resolver.
Control D Gotchas & Operational Limits
These are documented constraints or practical friction points that may matter before you adopt the product.
Analytics can include DNS queries and metadata when enabled.
Organizations should choose data retention and storage regions with their privacy requirements in mind.
Evidence source ↗Some browser configurations can bypass the operating system resolver.
A device-level DNS setup may need an additional browser-specific configuration to apply consistently.
Evidence source ↗Security & Privacy
For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.
Security posture at a glance
| Deployment | Cloud-managed DNS service |
|---|---|
| Encryption | Trust Center states AES-256 at rest and TLS 1.2 or higher in transit |
Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.
Control D Pricing & Plans
Free DNS
$0
ongoing
Preset DNS resolvers are available without an account; these do not include the paid dashboard customization features.
Check current pricing →Some Control
$3/month or $30/year
monthly or annually
Personal plan with configurable DNS filtering and management features; excludes Full Control traffic redirection.
Check current pricing →Full Control
$6/month or $60/year
monthly or annually
Personal plan that adds traffic redirection to Some Control features.
Check current pricing →SMB
$2 per endpoint
month
Self-service business plan billed per endpoint. The official pricing page advertises a 14-day trial without a credit card.
Check current pricing →School / Non-profit, MSP, Enterprise
Contact sales
The official business pricing page directs these customers to request tailored pricing or contact the vendor.
Check current pricing →Pricing may change. Verify current plans on the vendor's website.
Control D Competitors & Alternatives
Compare similar products directly, then see which alternatives may make more sense when your requirements differ.
Direct competitors
These products address broadly similar requirements. The descriptions focus on documented reasons a buyer might compare them with Control D.
Control D Features
DNS Filtering
- Block or allow domains and categories
- Rules for individual services and apps
- Custom domain rules
- Threat and content filtering
Profiles and Deployment
- Device endpoints with individual resolver configurations
- Profiles for applying DNS policies
- Windows and macOS clients
- iOS and Android setup helpers
- Router and manual DNS setup options
Privacy and Analytics
- DNS-over-HTTPS
- DNS-over-TLS
- DNS-over-QUIC
- Optional DNS query analytics
- Selectable Analytics storage regions
Management and Integration
- Documented API
- Okta OIDC and Microsoft Entra ID OIDC SSO
- Jamf deployment guidance for macOS
- Tailscale purchase and tailnet DNS configuration
Demo & Screenshots
Control D Specifications
| Deployment | Cloud-managed DNS service |
|---|---|
| DNS protocols | DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, optional legacy DNS |
| API | Documented API; currently unversioned |
| Free trial | 14 days for business plans; no credit card required |
| Analytics storage regions | New York, Amsterdam, or Sydney |
| Business raw query retention | 30 days |
| Business analytics retention | Up to one year |
| Encryption | Trust Center states AES-256 at rest and TLS 1.2 or higher in transit |
| Identity integrations | Okta OIDC and Microsoft Entra ID OIDC SSO |
Deployment & System Footprint
Verified installation, hosting, administration, or environment details that can affect implementation.
| Installation or hosting | Cloud DNS service configured using device-specific resolvers, optional desktop clients, mobile setup helpers, DNS profiles, or router configuration. Source ↗ |
|---|---|
| Supported DNS protocols | DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and optional legacy DNS are documented. Source ↗ |
Our evidence-based assessment
TechZella Score
A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.
7.9/10Moderate confidence
The product documents broad DNS filtering, device-level policies, multiple setup methods, and optional traffic redirection. Public G2 evidence is limited to five reviews, so sentiment and usability assessments have limited confidence.
Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.
Editorial transparency
Our Review Methodology
Key claims are linked to the sources used to verify them. This evidence record is separate from third-party user ratings.
TechZella evaluates software using documented product capabilities, pricing information, usability and value considerations, independent user evidence where available, and competitive context. The assessment is an editorial review, not a hands-on test unless one is explicitly identified. Our editorial assessment is based on 6 documented sources.
What TechZella adds
- Supports DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and legacy DNS configurations.
- Lets administrators apply different DNS rules to profiles and endpoints, with rules for categories, individual services, and domains.
- The Full Control personal plan adds DNS-based traffic redirection through proxy locations.
Important limitations
- DNS filtering acts on domain resolution; it does not replace a full device-security suite or provide application-level ad removal.
- The public API documentation states that the API is currently unversioned and could change without notice.
- When Analytics is enabled, DNS query data and associated metadata can be logged; customers should assess retention and storage-region settings.
Evidence-backed claimsControl D provides configurable DNS filtering and traffic redirection. SMB pricing is listed at $2 per endpoint per month. The current business pricing page advertises a 14-day trial without a credit card. The public API is currently unversioned. Control D supports SSO using Okta OIDC and Microsoft Entra ID OIDC. Customers can choose among three listed Analytics storage locations. Control D can be purchased through Tailscale and applied to devices on a tailnet.
Official documentation describes blocking, allowing, spoofing, and redirecting domain requests.
View source ↗Verified 2026-10-05The official business pricing page lists the SMB self-service plan at this monthly endpoint rate.
View source ↗Verified 2026-10-05The official page describes a 14-day free trial and states no credit card is required.
View source ↗Verified 2026-10-05The API getting-started documentation warns that changes may occur and breaking changes could be introduced without warning.
View source ↗Verified 2026-10-05The organization-members documentation names both identity-provider options.
View source ↗Verified 2026-10-05The Trust Center lists New York, Amsterdam, and Sydney as customer-selectable Analytics storage regions.
View source ↗Verified 2026-10-05The company's announcement describes the purchase option and DNS configuration workflow for tailnet devices.
View source ↗Verified 2026-10-05Community feedback
Reviews
No reviews yet. Be the first to share your experience.
Write a Review
Please log in to submit a review.
FAQ
Does Control D offer a free trial?
The business pricing page advertises a 14-day trial without requiring a credit card.
What platforms does Control D support?
Its documentation lists Windows, Windows Server, macOS, Linux, Android, iOS, browsers, and routers. Available setup methods vary by platform.
Does Control D have an API?
Yes. The vendor publishes API documentation for scripted and advanced interactions. The documentation warns that the API is currently unversioned.
What integrations are documented?
Official documentation covers Jamf deployment for macOS, SSO with Okta OIDC and Microsoft Entra ID OIDC, and an option to purchase and configure Control D through Tailscale.
Can Control D replace a VPN?
Full Control offers DNS-based traffic redirection through proxy locations. The vendor describes that feature as proxy-based routing, but it should not be assumed to meet every VPN requirement.
Can administrators choose where Analytics data is stored?
The Trust Center lists New York, Amsterdam, and Sydney as selectable Analytics storage regions. It also says Analytics data can be deleted through the dashboard.