Comodo Secure DNS

Comodo Secure DNS is a cloud-based DNS security service for organizations that need web threat blocking and centrally managed filtering across sites and roaming devices. It is best suited to enterprises and managed service providers; Gold offers a free starting point, while internal-network controls and encrypted DNS require a Platinum plan.

Overview

Comodo resolves DNS requests through load-balanced, geographically distributed Anycast infrastructure hosted in more than 25 countries. That gives organizations a distributed cloud service rather than a resolver to host themselves. The service blocks phishing, malware domains, malicious sites, botnets, spyware, and other web-borne attacks.

Its filtering covers more than 80 content categories, with millions of new domains added every two hours. Administrators can set custom allowlists and blocklists and apply policies by company, location, endpoint, mobile device, IP, subnet, or user. This range suits organizations with different rules for different groups or locations, but the distinction between plans matters: Gold excludes internal IP and subnet policies and internal IP visibility.

Key features

• Threat intelligence: Comodo says its Threat Research Labs draws on 85 million analysis nodes in more than 190 countries. This underpins the service’s protection against a broad range of web-borne attacks.
• Roaming coverage: Protection extends off-network wherever roaming users and devices connect to the internet. The iOS and Android apps protect devices on cellular networks as well as Wi-Fi.
• Reporting and block pages: Customizable real-time reports and scheduled email reports give administrators visibility into activity. Administrators can also add a logo and tailor block pages and messages by category.
• Plan-dependent controls: Platinum supports encrypted DNS traffic, virtual appliances, and policies for internal IPs, subnets, IP blocks, and sites. It can bypass domains to internal DNS servers for Active Directory sites; Gold does not support Active Directory.

Pricing

Secure Internet Gateway Gold: free, billed Free. It allows up to 300,000 DNS requests per month and is aimed at enterprises and MSPs. The request ceiling may be a decisive constraint for larger deployments. Gold also excludes internal IP/subnet policies, internal IP visibility, DNS encryption, and DNS resolver virtual appliances.

Secure Internet Gateway Platinum for Enterprises: custom pricing. It includes 24×7×365 Platinum Support, internal IP, subnet, IP block, and site policies, encrypted DNS traffic, and virtual appliances. A one-month trial option is available. Enterprises that need Active Directory site routing or internal-network controls have a reason to consider the upgrade.

Secure Internet Gateway Platinum for MSPs: custom pricing. Alongside Platinum Support and the same internal-network policies, encrypted DNS, and virtual appliances, it includes a multi-company management dashboard. That makes it the relevant package for providers managing multiple customer organizations centrally. Both Platinum packages offer a one-month trial option. All packages include 24×7 email support.

Platforms

Comodo Secure DNS supports Android, iOS, Linux, macOS, web, and Windows. Its mobile apps extend protection to cellular connections, not just Wi-Fi.

Who it's for

Gold is a practical fit for enterprises or MSPs that want category filtering, threat blocking, and reporting without a paid plan, and can stay within 300,000 DNS requests per month without the excluded internal-network features. Enterprises needing encrypted DNS, virtual appliances, or policies for internal sites should look at Platinum. MSPs managing multiple companies have a specific reason to choose the MSP Platinum package. This is a less suitable choice for anyone seeking a general-purpose personal DNS service rather than organizational controls.

Pros and cons

• Pro: More than 80 filtering categories and custom lists allow organizations to tailor access policies instead of relying on a single preset.
• Pro: Off-network coverage and mobile apps extend policy protection to roaming devices on cellular and Wi-Fi networks.
• Pro: Gold has no charge, giving organizations a way to start with threat blocking and reporting before considering Platinum.
• Con: Gold’s 300,000-request monthly cap and exclusions for internal controls, encryption, and virtual appliances limit its fit for more demanding deployments.
• Con: Platinum pricing is custom, so organizations cannot compare its cost from a published rate.

Alternatives

DNS Filtering Software is a broader category to explore when comparing services.

• AdGuard DNS is a better fit for readers who want an open-source DNS service with a free plan and support for self-hosting.
• NextDNS is worth considering for unlimited devices and configurations on its free plan, which includes all features and allows 300,000 queries per month; it has no free trial.
• NxFilter is an option for commercial or non-commercial users seeking freeware, with a paid Jahaslist Monthly plan also available.
• OpenDNS FamilyShield suits readers who want a free service preconfigured to block adult content without signing up.
• Quad9 is a free option for users who want DNS service without a contract or sign-up process.
• Technitium DNS Server is a free, open-source self-hosted DNS server for those who want to run their own service.
• Blocky is a free, open-source self-hosted DNS proxy.
• Pi-hole is a free, open-source choice for readers who want filtering on supported Linux hardware or in Docker.

Verdict

Choose Comodo Secure DNS if your organization wants centrally managed DNS threat blocking and category policies, particularly for roaming devices, and Gold’s request limit is sufficient. Its strongest case is the combination of granular controls, off-network coverage, and reporting. Look elsewhere if you need internal-network features but cannot take on custom-priced Platinum, or if your use case is personal DNS rather than enterprise or MSP management.