Gatekeeper for organizations

Protect a remote
workforce with one setting.

We authorize your VPN's or office's public address on our resolver. Your IT team points the DNS setting there, and the people behind it are protected without installing anything.

Ask About Pricing Talk to an Expert

How it works.

  1. 01

    We authorize your addresses

    We add your VPN's or office's public address to the resolver's allowed list. Addresses that are not on it are refused.

  2. 02

    Your IT team changes one setting

    Point the DNS setting of the VPN or office network at the resolver address we send you. No agents and no client software.

  3. 03

    The people behind it are covered

    Anyone whose lookups go through that VPN or network gets the same protection Gatekeeper gives homes.

What your engineers can check.

  • Only authorized addresses get answers. Access is enforced at the network firewall in front of the resolver.
  • DNS over TLS on port 853 on our Dallas resolver, for encrypted lookups.
  • Signature validation: forged answers for signed domains are rejected.
  • Per-address rate limiting against abuse.
  • The resolver is set not to record the names it looks up. We keep counts of lookups and blocks.
  • The same blocking of known phishing, scam, malware and tracking domains that protects Gatekeeper homes.

Plan for the edges.

  • A device that is off the VPN uses whatever DNS its current network gives it.
  • Split-tunnel VPN profiles can send some lookups elsewhere. Check where your profile sends DNS.
  • Pricing depends on how many people and addresses you need covered. Tell us both and we will send a proposal.

Tell us how many people to cover.

Email support@cipherioninc.com with your user count and the public addresses of your VPN or office. We reply with a proposal.

Ask About Pricing Managed identity services