Comodo Secure DNS

Comodo Secure DNS is a cloud DNS security service for organizations that want to filter DNS traffic and protect users on and off the company network. Its broad policy controls and roaming-device coverage make it a stronger fit for enterprises and managed service providers than for individual users. Gold provides a useful free entry point, but its request cap and lack of internal-network controls put a ceiling on its usefulness.

Overview

The service resolves DNS requests through load-balanced, geographically distributed Anycast infrastructure hosted in more than 25 countries. It blocks phishing, malware domains, malicious sites, botnets, spyware, and other web-borne attacks. For organizations that want managed DNS protection without running their own resolver infrastructure, that combination is compelling.

Filtering covers more than 80 content categories, with millions of new domains added every two hours. Administrators can add custom blacklists and whitelists and apply policies by company, location, endpoint, mobile device, IP, subnet, or user. That flexibility suits organizations with distinct rules for different teams and sites, though some internal-network controls are reserved for Platinum.

Key features

• Threat intelligence: Comodo says its Threat Research Labs draws on 85 million analysis nodes in more than 190 countries. This supports protection against a wide range of web-borne threats.
• Roaming-device protection: Coverage extends beyond the office network, and the iOS and Android apps protect devices over cellular connections as well as Wi-Fi. That makes the service more suitable for mobile workforces than a policy limited to office DNS traffic.
• Reporting and block pages: Real-time customizable reports and scheduled email reports give administrators visibility into activity. Custom logos and category-specific block messages let organizations make filtering clearer to users.
• Support: Every package includes 24×7 email support; Platinum packages add 24×7×365 Platinum Support.

Pricing

Secure Internet Gateway Gold: free, billed Free, for enterprises and MSPs. It allows up to 300,000 DNS requests per month and includes 24×7 email support. The cap may be adequate for a small deployment or evaluation, but it can make Gold a poor fit for larger fleets or sustained use. Gold does not support Active Directory and excludes internal IP/subnet policies, internal IP visibility, DNS encryption, and DNS resolver virtual appliances.

Secure Internet Gateway Platinum for Enterprises: custom pricing. It includes 24×7×365 Platinum Support, internal IP, subnet, IP block, and site policies, encrypted DNS traffic, virtual appliances, and a 1 month trial option. This is the relevant step up for enterprises that need internal-network controls or encrypted DNS.

Secure Internet Gateway Platinum for MSPs: custom pricing. It includes the same listed Platinum support, policy options, encrypted DNS, virtual appliances, and 1 month trial option, plus a multi-company management dashboard. That dashboard makes this the plan designed for providers managing multiple customers. Platinum also supports bypassing domains to internal DNS servers for Active Directory sites; Gold does not.

Platforms

Comodo Secure DNS supports Android, iOS, Linux, macOS, web, and Windows. The mobile apps extend protection over both Wi-Fi and cellular networks.

Who it's for

Choose Comodo if you manage enterprise or MSP users and need centrally applied category filtering, threat blocking, reporting, and coverage for devices that leave the office. Gold is a reasonable starting point when the 300,000-request monthly ceiling and its missing internal controls are acceptable. Organizations requiring encrypted DNS, internal IP or subnet policies, virtual appliances, or internal DNS bypass for Active Directory sites should consider Platinum. Individuals seeking a straightforward personal DNS filter may find the organization-focused plans and controls unnecessary.

Pros and cons

• Pro: More than 80 filtering categories, custom lists, and policy assignment across users, endpoints, locations, and networks give administrators meaningful control over different groups.
• Pro: Off-network protection and mobile apps covering cellular and Wi-Fi connections suit roaming users.
• Pro: Gold is free for enterprises and MSPs, with a stated allowance of up to 300,000 DNS requests per month.
• Con: Gold lacks Active Directory support, internal IP visibility and policies, DNS encryption, and virtual appliances, limiting its role in complex deployments.
• Con: Platinum pricing is custom, so its cost cannot be weighed against Gold from a published rate.

Alternatives

For a broader comparison, see DNS Filtering Software.

• AdGuard DNS is worth considering if open-source code inspection matters; it has a free plan and supports a wide range of platforms.
• NextDNS is an alternative for users seeking a free plan with 300,000 monthly queries, unlimited devices, and unlimited configurations; unlike Comodo, its listed free plan has no trial.
• NxFilter offers freeware for commercial and non-commercial use, making it an option for those prioritizing free use across either context.
• OpenDNS FamilyShield is a simpler free option when preconfigured adult-content blocking and no sign-up are the priority.
• Quad9 is a free DNS service with no contract or sign-up process.
• Technitium DNS Server is a free, open-source, self-hosted DNS server for those who prefer to run their own service.
• AdGuard is another freemium option, with listed personal and family plans tied to device counts.
• CleanBrowsing offers a Basic plan at $8.99 a month, with up to 25 devices or 3.75 M requests/month.

Verdict

Comodo Secure DNS is a strong fit for enterprises and MSPs that need configurable threat filtering, roaming-device coverage, and centralized reporting. Gold makes it possible to start without a subscription cost, but the monthly request ceiling and missing internal-network features matter. Choose Platinum when those controls, encrypted DNS, or MSP multi-company management are essential; otherwise, a simpler free DNS alternative may be a better match.