In-region logging on Enterprise.Details
Secure Domains
Plans & Pricing

Simple pricing. Serious protection.

Per-device plans that scale from one home to ten thousand seats — and an enterprise track when you outgrow them.

Every self-service plan starts with a free trial. Your card is not charged until it ends.

Live pricing is momentarily unavailable.Plan features are shown below — current prices are always visible at signup.
01 · Protect plans

DNS Armor Protect™ plans

Protective DNS priced per protected device. Change plan, seats or billing anytime with a live preview of your next charge.

Plan for

Any email address · up to 100 devices

Billing

One billing choice — it applies to both products.

Limits shown for 25 devices — change the number in the bill estimator to see them update.

Protect Basic

Everything a home or small network needs to be safe.

See current pricing at signup
  • Protective DNS filtering & threat blocking
  • Cloud policies with time scheduling
  • 2 security policies · 2 local rulesets
  • 2 portal users
  • Web & app category filtering
Start free trial

Free trial · no charge until it ends

Protect Advanced

Most popular

The full arsenal — AI detection and infrastructure controls.

See current pricing at signup
  • Everything in Basic
  • AI Threat Detection (tunneling, fast-flux, infiltration)
  • Local resolvers & external RPZ threat feeds
  • Networks, private networks & DDNS
  • Entitlements grow every 200 devices
Start free trial

Free trial · no charge until it ends

Enterprise

Licensed to your scale, deployed your way.

CustomLicence-based
  • Multi-tenancy per licensed quantity
  • Public or private cloud (MSP mode)
  • Dedicated storage · your choice of region
  • On-prem resolvers & agents at scale
  • Guided PoC and rollout
Contact sales

Licence-based

Where your data runs.

Self-service (online signup)Served automatically from our Frankfurt, Germany service plane. Your DNS logs are archived in the region you choose at signup.
EnterpriseService plane and logging plane together in the region you choose, so queries are processed and logs are stored in the same jurisdiction.

Frankfurt applies to online self-signup only, for both DNS Armor Protect™ and DNS Armor Resolve™.

View all features

See current pricing at signup
Start free trial

Protection

Protective DNS filtering & threat blocking
Yes
Web & app category filtering
Yes
Policy scheduling (time-based rules)
Yes
AI Threat Detection (tunneling, fast-flux, infiltration)
Yes
External RPZ threat feeds
5

Management

Security policies
2
Local rulesets
2
Portal users & roles
5
Local resolvers
2
Networks, private networks & DDNS
Yes

Scale & tenancy

Devices per seat
1
Device ceiling
Segment cap
Multi-tenancy (customer/tenant hierarchy)
No
Private-cloud / on-prem deployment
No
Protect Advanced

Platform notes

  • Advanced entitlements grow every 200 devices, up to their plan caps.
  • Segment ceilings: 100 devices (Personal) · 1,000 (Business) · 10,000 seats (Education).
  • Self-service runs one dedicated tenant per account on the Frankfurt, Germany service plane; DNS logs are archived in the region chosen at signup.
  • Prices in USD. Amounts shown are fetched live from our billing system.
02 · Resolve

DNS Armor Resolve™

Resolve is licensed on its own — add it to a Protect subscription or run it standalone. Usage-billed automatically from your live zone and record counts; zero usage bills nothing.

Licensed separately

Authoritative DNS · AuthDNS licence — separate from Protect

Start free trial with Resolve

Free trial · no charge until it ends

DNS Armor Resolve — authoritative DNS portal

Resolve pricing at a glance

Resolve pricing at a glance
FeatureResolve (self-service)Resolve Enterprise
ZonesBilled per 10-zone block · up to 10 (Personal) or 100 (Business & Education)Per licensed quantity
DNS recordsBilled per 100-record block · up to 200 (Personal) or 10,000 (Business & Education)Per licensed quantity
DNSSEC✓ Included✓ Included
Smart routing (geo & health-based)YesYes
Zone-transfer control (TSIG keys, transfer & query ACLs)YesYes
BillingAutomatic from live usage · annual billing discountedContract
Estimate

Work out your bill before you sign up

Move the sliders. Every figure is calculated live from our billing system — this is the same arithmetic your invoice uses.

DNS Armor Protect

One seat covers one protected device. Set to 0 for a Resolve-only setup.

DNS Armor Resolve

Authoritative DNS with DNSSEC — a separate licence, billed by usage.

Billed in blocks of 10 — 0 block(s).

Billed in blocks of 100 — 0 block(s).

Estimated cost

Plan features are shown below — current prices are always visible at signup.

03 · Enterprise

The Enterprise track

When shared cloud isn’t enough: a localized sovereign service and logging plane, dedicated tenancy and private cloud — your DNS, your jurisdiction, licensed to your scale.

Enterprise track

Licensed to your scale, deployed your way

Multi-tenancy at scaleA full customer/tenant hierarchy for MSPs and group structures, subject to your licensed quantity — with per-tenant isolation, RBAC and audit.
Private-cloud deploymentRun the entire platform in your own environment (MSP Private Cloud mode) with a dedicated log pipeline and database-backed configuration — no shared infrastructure.
Your region, your storageDedicated storage per customer or per tenant, in the region your regulations require — not a shared service plane.
Licence-based entitlementsDNS Firewall and Authoritative DNS are licensed independently, sized to your licensed quantities — not per-seat plan tiers.

Self-service vs Enterprise

Self-service vs Enterprise
FeatureSelf-serviceEnterprise
Where your data runsFrankfurt, Germany service plane, assigned automatically for self-signup; DNS logs archived in the region chosen at signupService plane and logging plane together in the region you choose
TenancyOne dedicated tenant per account (no sub-tenants)Multi-tenancy — customer/tenant hierarchy, per licensed quantity
DevicesPer-seat plans up to segment ceilings (100 / 1,000 / 10,000)Per licensed quantity — no ceiling
DeploymentFrankfurt, Germany service planeLocalized sovereign service & logging plane — private cloud available, plus on-prem options
StorageLog-archive region chosen at signupDedicated sovereign storage, in the region your regulations require
LicencesProtect plan + optional Resolve add-onDNS Firewall and AuthDNS licensed independently
OnboardingOnline signup, free trial, minutesGuided PoC and rollout with our engineers

Where your data runs.

Self-service (online signup)Served automatically from our Frankfurt, Germany service plane. Your DNS logs are archived in the region you choose at signup.
EnterpriseService plane and logging plane together in the region you choose, so queries are processed and logs are stored in the same jurisdiction.

Frankfurt applies to online self-signup only, for both DNS Armor Protect™ and DNS Armor Resolve™.

04 · FAQ

Pricing questions, answered

How does the free trial work?

Every self-service plan starts with a free trial with full access to the features of your chosen tier. A card is required at signup, but nothing is charged until the trial ends — cancelling during the trial costs you nothing.

What exactly is a “device”?

A protected device (endpoint) using DNS Armor for DNS resolution. You buy seats; on Personal and Business plans one seat covers one device, and on verified Education accounts one seat covers ten devices.

Can I change plan or seats later?

Yes — upgrade, downgrade, add or remove seats, switch monthly/annual, or add Resolve at any time from Manage Subscription, with a live preview of your next charge before you confirm. Downgrades are only blocked while your current usage wouldn’t fit the smaller plan.

Are Protect and Resolve the same product?

No. Protect (protective DNS / DNS firewall) and Resolve (authoritative DNS) are two separate licences. Resolve can be added to a Protect subscription or run standalone, and enterprises licence each independently.

How does Education pricing work?

Education & Library accounts get both Protect tiers at the Basic price, and each seat covers ten devices once verified. Verification is a quick manual review — usually under one business day — and requires an institutional email.

Where does my data live?

Self-service accounts for DNS Armor Protect™ and DNS Armor Resolve™ are served automatically from our Frankfurt, Germany service plane, and your DNS logs are archived in the region you choose at signup. Frankfurt applies to online self-signup only. On the Enterprise track, we place your service plane and logging plane together in the region you choose, so queries are processed and logs are stored in the same jurisdiction. The Trust Center has the full data-residency table.

What happens if I cancel?

You keep access until the end of the period you’ve paid for, and you can reactivate before it ends. We don’t offer refunds for partial billing periods except where the law requires it — which is why the trial is free and cancellation during it costs nothing.

What if I need more than the plan ceilings?

That’s the Enterprise track: multi-tenancy per licensed quantity, single-tenant or private-cloud deployment, dedicated storage, your choice of region, and licence-based limits. Talk to our sales team.

Do you offer annual billing?

Yes. Every self-service plan can be billed monthly or annually, and annual billing is discounted — the exact saving is shown on the billing toggle and is calculated live from our billing system. You can switch between monthly and annual at any time from Manage Subscription.

Can MSPs and managed service providers use DNS Armor?

Yes, on the Enterprise track. MSP deployments get a full customer/tenant hierarchy with per-tenant isolation, RBAC and audit, subject to your licensed quantity, and can run in MSP Private Cloud mode on your own infrastructure. Self-service accounts are single-tenant and don't support sub-tenants.

How is payment handled?

All billing runs through Stripe — your card details are stored with Stripe, never on our servers. Every amount on this page is fetched live from the same billing system that issues your invoice.

Is DNSSEC included?

Yes. DNSSEC is included with DNS Armor Resolve at no additional cost, alongside smart routing and zone-transfer controls (TSIG keys, transfer and query ACLs).

Which languages does the platform support?

The DNS Armor portal and this website are fully available in English and Arabic, including right-to-left layouts.

Protect your first device in minutes.

Sign up, pick a plan, point your devices — no sales call, no hardware.