Comodo Secure DNS vs Quad9

Comodo Secure DNS routes DNS requests through redundant security servers and filters web access to block phishing, malware domains, malicious sites, botnets, spyware, and other web-borne attacks. Its cloud infrastructure uses load balancing and geographically distributed Anycast servers hosted in more than 25 countries. Domain filtering spans more than 80 content categories, with millions of new domains added every two hours; administrators can also set custom blacklists and whitelists. Policies and visibility can be assigned by company, location, endpoint, mobile device, IP, subnet, or user. Protection extends to roaming users off-network, and iOS and Android apps cover cellular and Wi-Fi connections. Administrators get customizable real-time and scheduled email reports, plus customizable block pages. The free Gold package allows up to 300,000 DNS requests per month, but excludes several internal-network and encryption features. Separate Platinum packages are offered for enterprises and MSPs, with prices not listed. The listed platforms are Android, iOS, Linux, macOS, web, and Windows.

Quad9 is a free recursive DNS service that blocks requests to domains associated with malware, viruses, adware, phishing and scams. It draws on threat information from more than 20 partners to identify malicious domains. The service supports DNS over TLS, DNS over HTTPS and DNSCrypt, and provides DNSSEC validation on its resolver services. Quad9 says it does not store end-user IP addresses and operates under Swiss privacy law. Its focus is malicious-domain blocking, not content filtering; it also does not offer custom domain policies. Setup documentation covers Cloudflared, Pi-hole and open-source routers including pfSense, OPNsense, OpenWrt, MikroTik RouterOS and IPFire. Support assists with setup questions and issues. Quad9 reports 99.999% uptime for its global anycast service. The service costs nothing, with no contract or sign-up process, and is listed for Android, iOS, Linux, macOS and Windows. Large organizations planning high-volume DNS traffic are asked to contact Quad9 first.