Skip to content
SPECIFICTION
Get listed

Control D

controld.com

From $2/mo Free trial Open source WebWindowsmacOSLinuxiOSAndroid
Visit controld.com
Spec score 9.1 #3 of 65 in Internet Filtering Software

What it is

Control D is a configurable DNS filtering and traffic redirection service for controlling access to domains, services and browsing activity. Its filtering includes 20 content categories, custom rules and more than 1,000 premade services that users can block or allow. Malware protection uses threat intelligence feeds and machine learning, with selectable aggressiveness levels. DNS connections support DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC and DNS-over-HTTPS/3, as well as IPv4 and IPv6. Listed integrations cover Windows, macOS, Linux, iOS, Android, browsers, routers, RMM tools and Tailscale. API access includes generating and invalidating tokens. Raw query logs are retained for 30 days and lower-resolution analytics for up to one year; customers can choose analytics storage in New York, Amsterdam or Sydney. A free plan is available. The SMB plan costs $2 a month, billed per endpoint, and includes self-serve deployment and real-time analytics. Control D was founded in Toronto in 2021.

Spec sheet

What it does
Control D is a DNS filtering and traffic-redirection service that blocks threats and unwanted content and can route domains through proxies.Read 15 Oct 2026 · g2.com
Product
Control D is a customizable DNS filtering and traffic redirection platform that can block or redirect domains, services, and browsing activity.Read 30 Sep 2026 · docs.controld.com
Intended users
Control D says it is designed for SMBs, enterprises, individuals, and IT administrators seeking customizable DNS security and internet controls.Read 30 Sep 2026 · controld.com
API
The public API uses dashboard-created bearer tokens with read or write scopes and optional source-IP restrictions.Read 15 Oct 2026 · docs.controld.com
Integrations
Documented integrations include Asus Merlin, DD-WRT, Firewalla, OpenWRT, pfSense, OPNsense, Ubiquiti, Synology, major operating systems, browsers, RMM tools and Tailscale.Read 15 Oct 2026 · controld.com
Support
The pricing comparison lists email and community support, an AI assistant, and live engineer sessions for some plans.Read 30 Sep 2026 · controld.com
Headquarters
Toronto, CanadaRead 23 Sep 2026 · controld.com
Founded
2021Read 23 Sep 2026 · controld.com
Company
The About Us page states that Control D was founded in 2021 in Toronto, Canada.Read 30 Sep 2026 · controld.com
AI data use
The Trust Center says customer data is never used to train its AI systems; its optional support chatbot logs are retained for 90 days.Read 30 Sep 2026 · controld.com
Analytics retention
Raw query logs are retained for 30 days and lower-resolution analytics for up to one year.Read 15 Oct 2026 · controld.com
API limitation
Control D warns that its API has no versioning and may introduce breaking changes without notice.Read 15 Oct 2026 · docs.controld.com
Company facts
Control D Inc is described as a privately held Toronto computer and network-security company founded in 2021 with 51–200 employees on LinkedIn.Read 15 Oct 2026 · ca.linkedin.com
Content filtering
Administrators can choose from 20 content categories and add custom allow or block rules.Read 15 Oct 2026 · controld.com
Data locations
Customers can select analytics storage in New York, Amsterdam, or Sydney.Read 30 Sep 2026 · controld.com
Data protection
The Trust Center says data is encrypted with AES-256 at rest and TLS 1.2 or higher in transit, and customers can delete analytics data through the dashboard.Read 30 Sep 2026 · controld.com
Data regions
Analytics storage can be selected among New York, Amsterdam and Sydney.Read 15 Oct 2026 · controld.com
Developer tooling
ctrld supports shell, PowerShell and Docker installation, Go 1.21-plus source builds, CLI management and API or TOML configuration.Read 15 Oct 2026 · github.com
DNS protocols
Control D supports DNS-over-HTTPS, DNS-over-HTTPS/3, DNS-over-TLS, DNS-over-QUIC and legacy UDP port 53.Read 15 Oct 2026 · controld.com
Downloads
The GUI utility is distributed as Windows EXE, macOS DMG, Google Play and App Store applications, with managed and native modes.Read 15 Oct 2026 · docs.controld.com
Filtering
Control D offers 20 content categories, custom rules, and more than 1,000 premade services that can be blocked or unblocked.Read 30 Sep 2026 · controld.com
Limit: Android app
Google Play reviewers report the app can lose connectivity after sleep or extended running, while recommending Android Private DNS as a more reliable alternative.Read 15 Oct 2026 · play.google.com
Limit: Apple app
App Store reviewers request automatic Wi-Fi profile switching, a fuller iOS interface and dashboard administration, and one reports outdated DoH3 UI.Read 15 Oct 2026 · apps.apple.com
Limit: G2 reviewers
Reviewers mention abstract rules, analytics needing improvement, a learning curve, false positives and occasional latency or slow blocklist updates.Read 15 Oct 2026 · g2.com
Limit: protocol scope
Control D documents that DNS filtering cannot block the BitTorrent protocol itself and is not a substitute for a VPN or life-critical anonymity.Read 15 Oct 2026 · docs.controld.com
Limit: Trustpilot complaints
Critical reviews report strict refund terms, renewal-surprise concerns, setup difficulty, routing delays and legitimate traffic being blocked.Read 15 Oct 2026 · trustpilot.com
Maker origins
The company says Control D was spun out of Windscribe and was founded by Yegor Sak, Alex Paguis and Mark Ulicki.Read 15 Oct 2026 · controld.com
Malware protection
The service blocks malware, ransomware, phishing and other harmful domains, including machine-learning detection for domains absent from threat feeds.Read 15 Oct 2026 · controld.com
Multi-tenancy
The business service supports sub-organizations, per-client profiles and unlimited team members with permissions.Read 15 Oct 2026 · docs.controld.com
Notable news
On September 29, 2026, Control D announced direct purchase through Tailscale plus Mac MDM deployment and automatic cleanup.Read 15 Oct 2026 · controld.com
Open-source daemon
The ctrld cross-platform DNS daemon is published under the MIT license and can be self-hosted on computers and supported routers.Read 15 Oct 2026 · github.com
Praise: G2 reviewers
Reviewers repeatedly praise quick deployment, an understandable interface, strong blocking and easy integrations.Read 15 Oct 2026 · g2.com
Praise: Trustpilot reviewers
Positive reviewers cite extensive filtering, reliable DNS, ad and malware reduction, schedules, analytics and responsive community support.Read 15 Oct 2026 · trustpilot.com
Rating on Apple App Store
4.0 out of 5 from 46 ratingsRead 15 Oct 2026 · apps.apple.com
Rating on G2
4.6 out of 5 from 5 reviewsRead 15 Oct 2026 · g2.com
Rating on Google Play
4.4 out of 5 from 300 reviewsRead 15 Oct 2026 · play.google.com
Rating on Trustpilot
3.9 out of 5 from 48 reviewsRead 15 Oct 2026 · trustpilot.com
Security certifications
The company states GDPR, SOC 2 Type II, ISO 27001 and ISO 27701 compliance or certification, with AES-256 storage encryption and TLS 1.2-or-newer transit encryption.Read 15 Oct 2026 · controld.com
Service filtering
More than 1,000 predefined online services and apps can be blocked or allowed with toggles.Read 15 Oct 2026 · controld.com
SIEM integration
Raw DNS logs can be streamed to Splunk or Microsoft Sentinel.Read 15 Oct 2026 · controld.com
System requirements
Native secure-DNS setup works without software on Windows 11, macOS Big Sur or newer, iOS 14 or newer and Android 9 or newer.Read 15 Oct 2026 · docs.controld.com
Threat protection
Its malware protection blocks malicious domains using threat intelligence feeds and machine learning protection with selectable aggressiveness levels.Read 30 Sep 2026 · controld.com
Traffic redirection
DNS rules can redirect domains or all browsing through proxies in 69 countries without requiring a VPN.Read 15 Oct 2026 · controld.com

Plans and prices

SMB $2 a month per endpoint self-serve deployment · real-time analytics · core DNS filtering Read 15 Oct 2026 · controld.com
Enterprise Priced on request dedicated infrastructure · named customer-success manager · SIEM log streaming Read 15 Oct 2026 · controld.com
MSP / Channel Priced on request multi-tenant · per-client profiles and billing · 99.99% uptime Read 15 Oct 2026 · controld.com
School / Non-profit Priced on request discounted rate · real-time analytics Read 15 Oct 2026 · controld.com

Every Control D plan and price →

Strong points and limits

Strong points

  • Offers 20 content categories and custom rules.
  • More than 1,000 premade services can be blocked or allowed.
  • Supports four listed encrypted DNS protocols.
  • Analytics storage locations are selectable.
  • Free plan is available.

Limits

  • SMB plan costs $2 a month per endpoint.
  • Raw query logs are retained for 30 days.
  • Lower-resolution analytics may be retained for up to one year.

Who it suits

Control D may suit individuals, IT administrators, SMBs and enterprises seeking configurable DNS security and internet controls. Its platform integrations and API also address managed and technical deployments.

Control D in depth

Read the full write-up

Control D is a DNS filtering and traffic-redirection service for people and organizations that want granular control over internet access. It suits individual users through IT teams, but the right plan depends on whether you need self-serve controls or managed and enterprise infrastructure.

Overview

Control D can block or redirect domains, services, and browsing activity. Its combination of filtering, threat protection, analytics, and integrations makes it a fit for administrators who need more than basic domain blocking. Founded in Toronto in 2021, the company targets individuals, SMBs, enterprises, and IT administrators.

For category comparisons, see DNS Filtering Software and Internet Filtering Software.

Key features

Filtering spans 20 content categories, custom rules, and more than 1,000 premade services that can be blocked or allowed. Custom blocklists, safe-search controls, and schedules add useful precision: broad policies can coexist with rules for particular services and times.

Threat protection blocks malicious domains using threat-intelligence feeds and machine-learning protection, with selectable aggressiveness. That gives administrators a way to tune the balance between protection and blocking sensitivity. DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNS-over-HTTPS/3 are supported, along with IPv4 and IPv6.

Analytics retain raw query logs for 30 days and lower-resolution analytics for up to one year. Customers can choose storage in New York, Amsterdam, or Sydney, delete analytics data through the dashboard, and rely on AES-256 encryption at rest and TLS 1.2 or higher in transit. The Trust Center lists GDPR, SOC 2 Type II, Microsoft SSPA, ISO 27001, and ISO 27701 compliance or certification. Customer data is not used to train AI systems; optional support-chatbot logs are kept for 90 days.

Integrations cover routers, desktop and mobile operating systems, browsers, RMM tools, and Tailscale. The pricing comparison also includes a documented API for generating and invalidating tokens. Support includes email, community support, an AI assistant, and live engineer sessions on some plans.

Pricing

Control D is freemium, with a free plan, paid plans from $2/mo, and a 14-day trial. The SMB plan costs $2 a month, billed per endpoint. It is self-serve and includes real-time analytics, making it the clearest paid starting point for smaller organizations that want endpoint-based pricing. Monthly and annual payment are offered, but no annual SMB price is given.

Other plans have custom pricing or require contacting the provider. MSP / Channel is aimed at managed service providers and client fleets, with multi-tenant per-client profiles and billing, plus 99.99% uptime. School / Non-profit offers a discounted rate for K-12 schools, libraries, and registered nonprofits. Enterprise offers dedicated infrastructure, a named customer success manager, and SIEM log streaming. These options address distinct organizational needs, but their cost requires a sales or partnership conversation.

The free plan is a way to start without a paid commitment, but the available plan details do not establish its caps or feature limits. Readers who need a known endpoint price can assess SMB; larger deployments should weigh the tailored MSP, education, or enterprise arrangements against their budget and operational requirements.

Platforms

Control D supports Android, iOS, Windows, macOS, Linux, browsers, routers, web, self-hosted deployments, and an API. That breadth is useful for mixed-device environments and administrators who need to integrate DNS controls across endpoints and network infrastructure.

Who it's for

Individuals who want configurable DNS filtering can start with the free offering, while SMBs seeking self-serve management and real-time analytics have a per-endpoint paid option. MSPs can consider the multi-tenant plan for client fleets; schools and nonprofits have a discounted-rate route. Enterprise teams needing dedicated infrastructure, a named CSM, and SIEM log streaming are better matched to the custom enterprise plan. It is less compelling for buyers who need a published price for larger deployments before speaking with sales.

Pros and cons

Pros: Granular filtering combines categories, custom rules, and more than 1,000 services, giving administrators several levels of control.

Pros: Multiple encrypted DNS protocols, broad platform integrations, and API access suit varied endpoint and network setups.

Pros: Analytics retention, selectable storage regions, deletion controls, and published security certifications help organizations evaluate data handling.

Cons: Pricing for MSP / Channel, School / Non-profit, and Enterprise requires a direct inquiry, making those plans harder to compare on cost.

Cons: The SMB price is endpoint-based, so the total depends on the number of endpoints; no annual SMB price is given.

Alternatives

AdGuard DNS is worth considering if open-source availability matters: AdGuard says its code can be inspected, and it has a free plan.

OpenBLD offers a free-forever plan for private use, with about 100,000 DNS queries per day and a limit of 100 requests per second per IP. Choose it if those stated free-tier limits suit your use.

Diladele Web Safety may fit smaller deployments that need a defined device cap: its free Biz-7 Key covers up to seven filtered devices or users, while the Biz-25 Key costs €299 a year for up to 25.

FilterDNS is a free alternative for readers who want a no-cost option across its supported platforms.

NextDNS has a free plan with 300,000 queries per month, unlimited devices and configurations, and all features; it is a natural comparison for readers evaluating a usage-capped free tier.

NxFilter is freeware for commercial and non-commercial use, so it may suit buyers whose priority is free use across those contexts.

ClearDNS starts at $5.99 a month for five devices per user and 13 filtering categories. It is a paid alternative for buyers whose device and category needs fit those limits.

OpenDNS Home is free; its Family Shield plan comes preconfigured to block adult content and requires no sign-up, making it a simpler option for that specific purpose.

Verdict

Control D is a strong choice for people and organizations that need DNS filtering with fine-grained rules, broad platform coverage, threat protection, and configurable analytics. Its $2/mo endpoint-priced SMB plan gives smaller teams a concrete paid entry point, while dedicated arrangements serve managed fleets and enterprises. Look elsewhere if you need transparent pricing for a larger deployment or a more clearly defined free-plan allowance.

Verdict

Control D combines DNS filtering, threat protection and traffic redirection with broad platform integrations. The free plan and endpoint-priced SMB plan provide different starting points; analytics retention and storage location are specified.

Where Specifiction places it

Alternatives to Control DAll alternatives →