Sign in Start Free Trial
Now available on Azure Marketplace

DNS Filtering That Just Works

Enterprise-grade content filtering for any organisation. Block threats, enforce policies, and gain visibility — deployed in minutes, not weeks.

Start Free Trial See Pricing
14-day free trial · No credit card required · Cancel anytime

Transparent Pricing, No Hidden Fees

All features listed per tier. No add-on charges for data export, API access, or query logs. What you see is what you pay — every feature, every limit, stated upfront.

Enterprise Features at Mid-Market Prices

DoH, DoT, DNSSEC, 30-day query logs, multi-tenant management, scheduled policies, and auto device registration — all included below £2 per user per month.

Deploy in Minutes, Not Weeks

Point your DNS, configure policies, done. No agents required for network-level filtering. Works with any device on any network, managed from a single portal.

Pricing

Simple, Transparent Pricing

A user is any person or device whose DNS traffic is filtered by NetGuard.

Monthly Annual Save 15%
Starter
For small organisations getting started
£1.00 / user / month
Minimum £25 / month
  • Included
  • 1 organisation, up to 3 sites
  • 33+ content categories
  • DNS + DoH protocols
  • 14-day query log retention
  • Basic stats & reports
  • FamilySafe & BlockAll templates
  • Manual device management
  • Admin & Customer roles
  • MFA (TOTP) included
  • Email support
Most Popular
Professional
For growing teams with advanced needs
£1.50 / user / month
Minimum £50 / month
  • Everything in Starter, plus
  • Up to 5 organisations, 10 sites each
  • DNS + DoH + DoT protocols
  • DNSSEC validation
  • 30-day query log retention
  • Full reports + top domains & categories
  • All templates + scheduled policies (cron)
  • Manual + batch device management
  • All 5 RBAC roles
  • Read-only API access
  • Priority email support
Business
For established organisations at scale
£2.50 / user / month
Minimum £100 / month
  • Everything in Professional, plus
  • Up to 20 organisations, unlimited sites
  • Custom policy templates
  • Auto device registration (Workstation Control)
  • Full API access (DeskGuard integration)
  • Organisation-level aggregate reports
  • Customisable block page
  • Priority email + onboarding call
Partner
For MSPs managing multiple clients
£1.00 / user / month
Minimum £100 / month
  • Included
  • Unlimited organisations & sites
  • All DNS protocols (DoH, DoT) + DNSSEC
  • 30-day query log retention
  • All policies, schedules & templates
  • Full device management inc. auto-registration
  • Full API access (DeskGuard integration)
  • All 5 RBAC roles
  • Full reports incl. org-level aggregates
  • Priority email support
Partner Plus
For providers who need white-label control
£1.80 / user / month
Minimum £250 / month
  • Everything in Partner, plus
  • Customisable block page per organisation
  • Priority support + dedicated contact
  • White-label options Coming soon
Comparison

Full Feature Breakdown

Feature Starter Professional Business Partner Partner Plus
DNS Protocols
DNS-over-HTTPS (DoH) ✓ ✓ ✓ ✓ ✓
DNS-over-TLS (DoT) — ✓ ✓ ✓ ✓
DNSSEC validation — ✓ ✓ ✓ ✓
Per-device DoH authentication ✓ ✓ ✓ ✓ ✓
Content Filtering
Content categories 33+ 33+ 33+ 33+ 33+
Blocklist sources 4 sources 4 sources 4 sources 4 sources 4 sources
Domain overrides (allow/block) ✓ ✓ ✓ ✓ ✓
Scheduled policies (cron) — ✓ ✓ ✓ ✓
Policy templates 2 templates All templates All + Custom All templates All templates
Reporting
Query log retention 14 days 30 days 30 days 30 days 30 days
Reports Basic stats Full reports Full + Org aggregate Full + Org aggregate Full + Org aggregate
Devices & Access
Device management Manual Manual + Batch Full incl. auto Full incl. auto Full incl. auto
API access — Read-only Full access Full access Full access
RBAC roles available Admin + Customer All 5 roles All 5 roles All 5 roles All 5 roles
MFA (TOTP) ✓ ✓ ✓ ✓ ✓
Customisation & Support
Block page Standard Standard Custom Standard Custom per org
Support Email Priority email Priority + Onboarding Priority email Priority + Dedicated
Comparison

How NetGuard Compares

100-user organisation on mid-tier plans. All prices based on publicly available information.

Solution Monthly cost Annual cost Key limitation
Cisco Umbrella £180 – £225 £2,160 – £2,700 Quote-based, annual lock-in, opaque pricing
DNSFilter Pro £140 – £170 £1,680 – £2,040 6-day query logs on base tier; data export costs extra
WebTitan £145 – £180 £1,740 – £2,160 25-user minimum; pricing depends on negotiation
Control D (SMB) £160 £1,920 Newer entrant; pricing varies by organisation type
NetGuard Professional £150 £1,530 30-day logs, DoT, DNSSEC — all included at this price

All competitor prices based on publicly available pricing as of March 2026. Actual quotes may vary.

How It Works

Up and Running in Three Steps

1

Point Your DNS

Configure your network or devices to use NetGuard's DNS servers. Takes 5 minutes. Works with any router, firewall, or device. No agents, no software installs for network-level filtering.

2

Set Your Policies

Choose from 33+ content categories, add domain overrides, and set schedules. Policies cascade from tenant to organisation to site — the most specific rule always wins. Changes apply instantly.

3

See Everything

30-day query logs, top blocked domains, per-site aggregated stats, and full category breakdowns. Complete visibility without compromising privacy — domain names never reach our telemetry pipeline.

Security & Compliance

Built Secure From Day One

Azure-hosted, North Europe

Data sovereignty. Private endpoints for all infrastructure. No public database exposure.

GDPR PII Sanitisation

Domain names never reach Application Insights. Built into the DNS query pipeline.

BCrypt Passwords (Factor 12)

Industry-standard password hashing. Tokens hashed with SHA-256 before storage.

TOTP MFA on All Accounts

Time-based one-time passwords for every user. Recovery codes provided at setup.

JWT + Refresh Token Rotation

httpOnly cookies. Automatic token rotation. Blacklisting on logout.

Azure Key Vault

All secrets in Key Vault with private endpoints. Nothing in config files or environment variables.

CSRF Protection

Double-submit cookie pattern on all state-changing requests. OWASP-aligned implementation.

Security Headers

HSTS, CSP, X-Frame-Options DENY, X-Content-Type-Options, Referrer-Policy on every response.

FAQ

Common Questions

A user is any person or device whose DNS traffic is filtered by NetGuard. If you have 50 employees each with a laptop, that's 50 users. If you also filter 10 shared tablets, that's 60 users. Network-level filtering (via router or site DNS) counts the network, not individual devices behind it — contact us if you need help calculating your user count.
Yes. 14 days, full access to all features on your chosen plan. No credit card required. You'll be reminded on Day 10 and Day 13. If you don't subscribe, your account will be suspended at Day 14 — but your data and configuration are retained for 30 days.
Yes, upgrade or downgrade at any time. Changes are prorated automatically by Stripe. Upgrading takes effect immediately. Downgrading takes effect at the next billing cycle.
You'll be prompted to choose a plan. DNS filtering stops responding to queries, but all your configuration — policies, overrides, devices, organisations — is preserved. If you don't subscribe within 30 days of expiry, your data is permanently deleted.
Yes. Annual billing saves 15% compared to monthly pricing. Toggle between monthly and annual on the pricing section above to see the difference. Annual plans are billed once per year.
Standard DNS (UDP port 53), DNS-over-HTTPS (DoH, RFC 8484), and DNS-over-TLS (DoT, port 853). DNSSEC validation is available on Professional tier and above. All plans support per-device DoH authentication via 128-bit tokens.
Partner accounts get unlimited organisations and sites, full API access, and per-user pricing designed so you can build margin into your managed service. You manage all your clients from a single portal with full multi-tenant separation. Billing is consolidated — you pay one bill, you invoice your clients separately at whatever rate you choose.
Azure North Europe (Ireland). All infrastructure uses private endpoints — SQL, Key Vault, and cache are not publicly accessible. Domain names are never sent to our telemetry pipeline (GDPR compliance is built into the DNS query processor, not bolted on).
Get Started

Ready to protect your network?

Start your 14-day free trial. No credit card. No commitment.

Start Free Trial

Or book a call to discuss your requirements.