Cisco Umbrella
DNS-layer security and secure web gateway delivered from the cloud.
Network Segmentation
DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.
Addresses 92 stories in our coverage in the last 90 days 7 products that provide it
What it is
Blocking of malicious and unwanted domains at the DNS layer, and inspection of web traffic for threats and data uploads, on and off the company network.
How to value it
Phishing links, drive-by downloads and malware command servers all depend on domains. Blocking them is cheap, quick to roll out and stops many attacks at the first step, including on laptops outside the office.
Questions to ask a vendor
- 1How quickly are new malicious domains added to the block lists?
- 2Does it protect devices when they are off the company network?
- 3What logs do we get for investigations, and where is that data stored?
- 4Can users report a wrongly blocked site easily?
For your risk register
- Risk
- Users reach phishing and malware sites, and infected devices contact attackers.
- Control
- DNS filtering on all devices, on and off the network.
- Owner
- IT operations lead.
- Measure
- Share of devices covered.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Cloudflare Gateway
DNS filtering and secure web gateway.
DNSFilter
DNS filtering for offices and roaming devices.
Netskope Secure Web Gateway
Cloud secure web gateway with inspection of web and cloud app traffic.
Prisma Access
Cloud-delivered SASE: zero trust access to private apps and secure web gateway.
Quad9 DNS
Free, privacy-focused DNS resolver that blocks malicious domains using threat intelligence feeds.
Zscaler Internet Access
Cloud secure web gateway with DNS security, inspection and data protection.
Recent stories it addresses
375 stories in total- 12 Nov 2026European authorities take down SteaIC malware servers for second time this year
European authorities dismantle over 100 servers used by StealC malware for the second time this year.
- 12 Nov 2026186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
186 fake AI domains redirect users to malware, search hijackers, and click-lures.
- 11 Nov 2026The global socket: how threat actors are weaponizing GSocket for stealthy C2
Threat actors are using GSocket on Linux servers to maintain access after vulnerabilities are patched.
- 11 Nov 2026The XG Files: Falcon C2 Flying Under The (Browser) Radar
Falcon C2 framework targets governments with malicious browser scripts and extensions.
- 11 Nov 2026China-Linked Hackers Use Fake Chrome Certificate Warnings to Infect Victims With Sparrow Backdoor
China-linked hackers deploy SilentDelivery campaign using fake Chrome certificate warnings to deliver SquadC and
- 10 Nov 2026Cybercriminals are increasingly infecting regular people with spyware
Cybercriminals are increasingly infecting average people with spyware, with exploit kits like Coruna and DarkSword
- 10 Nov 2026Beyond the clipboard: The evolving tradecraft of ClickFix
ClickFix social engineering tactics evolve with new delivery and payload techniques.
- 6 Nov 2026Rental phishing sites use live chat to win over hesitant travelers
Phishing sites impersonating rental platforms use live chat to trick travelers into sharing personal data.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.