Envoy ◆
Envoy is a visitor management and workplace platform with secure check-in, emergency response, and compliance.
from $362/location/mo (billed annually)
About Control D
What is Control D?
Control D is a modern DNS filtering solution built by the engineers behind a 100M-user network. It blocks malware, phishing, and zero-day threats across all operating systems — Mac, Windows, Linux, iOS, and Android — with a 99.98% independently verified block rate. Unlike legacy tools, it works natively on every OS without workarounds.
Who is it for?
Control D is designed for IT and security teams managing distributed endpoints, MSPs that need multi-tenant control without client-breakage, and SMB teams that want self-serve deployment in minutes. It is not ideal for large enterprises needing dedicated infrastructure without a custom conversation — those should contact the sales team.
Real-world use cases
Engineering teams use Control D to enforce consistent DNS security across Mac, Linux, and Windows laptops in global offices. MSPs deploy silently across client fleets with a single dashboard, while schools and non-profits qualify for discounted rates. The 30-day query log retention on every plan simplifies SOC 2 audits and compliance reporting.
Key features
- 99.98% Malware Block Rate — Independently verified by Nexxwave (2025); real-time AI catches malicious domains before they reach blocklists.
- Native Cross-Platform Clients — One policy across Mac, Windows, Linux, iOS, and Android without workarounds.
- Priced Per Endpoint — No minimums, no annual lock-in; SIEM streaming and API access on every plan.
- Silent Install & Updates — Deploys once and updates seamlessly; Barry handles non-critical troubleshooting 24/7.
- 30-Day Query Logs — Every plan includes query log retention and a year of analytics; exportable SOC 2 evidence.
- Block 1,000+ Services — Toggle any app or service on/off with a single switch.
- Modern DNS Protocols — Supports DNS-over-HTTPS/3, TLS, QUIC, and legacy DNS (UDP 53).
SaaSpartout Score
7.6
/10
Editorial score from our review methodology — not user ratings.
◆ AI advisor — 30 seconds, no signup
Why are you looking at Web Security tools today?
Control D Pricing
Control D pricing: from $2/endpoint/mo.
For comparison: the median starting price in Cybersecurity is $9.99/month, measured across 116 tools we track. See the full SaaS Pricing Index →
SMB Self-Serve Plan — $2/endpoint/month
Self-serve deployment in minutes, real-time analytics, billed per endpoint. Get started today.
School / Non-Profit — Discounted Rate
Best-in-class DNS filtering for K-12 schools, libraries, and registered non-profits at a discounted rate with real-time analytics. Apply for non-profit rate.
MSP / Channel — Custom Pricing
Multi-tenant with per-client profiles and billing, 99.99% uptime. Contact partnerships.
Enterprise — Custom Pricing
Dedicated infrastructure, named CSM, SIEM log streaming. Contact sales.
Free trial: 14-day free trial available, no credit card required.
Frequently asked questions
How much does Control D cost?
Control D starts at $2 per endpoint per month for the SMB self-serve plan. Schools, non-profits, MSPs, and enterprise customers get custom pricing. A 14-day free trial is available with no credit card required.
What is Control D used for?
Control D is a DNS filtering tool used to block malware, phishing, and zero-day threats across all operating systems. It is commonly deployed by IT teams, MSPs, and schools for endpoint protection, content filtering, and compliance reporting.
Does Control D work on mobile devices?
Yes. Control D provides native setup helper apps for iOS and Android, plus desktop clients for Mac, Windows, and Linux. All devices can be managed under one policy.
What are the best alternatives to Control D?
Popular alternatives include DNSFilter, Cisco Umbrella, and Cloudflare Gateway. Control D differentiates with native cross-platform support, per-endpoint pricing without minimums, and a 99.98% independent block rate.
Is there a free trial for Control D?
Yes, Control D offers a 14-day free trial with no credit card required. You can deploy and test the full filtering capabilities before committing.
Who should not use Control D?
Large enterprises needing dedicated infrastructure and a named CSM without a custom conversation should contact the sales team first. For small teams wanting a quick self-serve solution, the SMB plan is ideal.
