Control D vs Quad9

Control D is a configurable DNS filtering and traffic redirection service for controlling access to domains, services and browsing activity. Its filtering includes 20 content categories, custom rules and more than 1,000 premade services that users can block or allow. Malware protection uses threat intelligence feeds and machine learning, with selectable aggressiveness levels. DNS connections support DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC and DNS-over-HTTPS/3, as well as IPv4 and IPv6. Listed integrations cover Windows, macOS, Linux, iOS, Android, browsers, routers, RMM tools and Tailscale. API access includes generating and invalidating tokens. Raw query logs are retained for 30 days and lower-resolution analytics for up to one year; customers can choose analytics storage in New York, Amsterdam or Sydney. A free plan is available. The SMB plan costs $2 a month, billed per endpoint, and includes self-serve deployment and real-time analytics. Control D was founded in Toronto in 2021.

Quad9 is a free recursive DNS service that blocks requests to domains associated with malware, viruses, adware, phishing and scams. It draws on threat information from more than 20 partners to identify malicious domains. The service supports DNS over TLS, DNS over HTTPS and DNSCrypt, and provides DNSSEC validation on its resolver services. Quad9 says it does not store end-user IP addresses and operates under Swiss privacy law. Its focus is malicious-domain blocking, not content filtering; it also does not offer custom domain policies. Setup documentation covers Cloudflared, Pi-hole and open-source routers including pfSense, OPNsense, OpenWrt, MikroTik RouterOS and IPFire. Support assists with setup questions and issues. Quad9 reports 99.999% uptime for its global anycast service. The service costs nothing, with no contract or sign-up process, and is listed for Android, iOS, Linux, macOS and Windows. Large organizations planning high-volume DNS traffic are asked to contact Quad9 first.