Control D
Control D is a customizable DNS filtering and traffic redirection platform for managing access to domains, online services, and browsing activity.
What Control D is
Control D is a customizable DNS filtering and traffic redirection platform for managing access to domains, online services, and browsing activity. Its controls include 20 content categories, custom rules, and more than 1,000 ready-made services that users can block or allow. Malware protection draws on threat intelligence feeds and machine learning, with selectable aggressiveness levels. DNS connections support DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and DNS-over-HTTPS/3, as well as IPv4 and IPv6. Control D works with Windows, macOS, Linux, iOS, Android, browsers, routers, and other listed integrations, and offers API access for generating and invalidating tokens. A free plan is available; the SMB plan is $2 a month, billed per endpoint, with self-serve deployment and real-time analytics. Raw query logs are kept for 30 days, while lower-resolution analytics may be retained for up to one year. Analytics storage can be set to New York, Amsterdam, or Sydney. Control D was founded in Toronto in 2021.
Good
- Blocks or allows services through 20 categories and custom rules.
- Malware protection has selectable aggressiveness levels.
- Supports four DNS protocols and IPv4 and IPv6.
- Analytics storage can be selected from three locations.
- Free plan and a 14-day trial are listed.
Watch out
- SMB plan costs $2 a month per endpoint.
- Raw query logs are retained for 30 days.
- Some support options are available only on some plans.
Who it suits
It suits individuals, IT administrators, SMBs, and enterprises seeking configurable DNS security and internet controls. The range of integrations and API access may also suit teams managing multiple systems.
Verdict
Control D combines granular DNS filtering with malware blocking and several protocol options. The free plan offers a way to start, while the SMB plan is priced per endpoint and analytics retention varies by resolution.
Plans and prices
From Control D's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| SMB | $2 a month | self-serve deployment · real-time analytics · core DNS filtering · per endpoint |
| Enterprise | Priced on request | dedicated infrastructure · named customer-success manager · SIEM log streaming |
| MSP / Channel | Priced on request | multi-tenant · per-client profiles and billing · 99.99% uptime |
| School / Non-profit | Priced on request | discounted rate · real-time analytics |
The facts
Each one read from Control D's own pages, with the date it was checked.
What it does
- AI data use
- The Trust Center says customer data is never used to train its AI systems; its optional support chatbot logs are retained for 90 days.checked 30 Sep 2026
- Analytics retention
- Raw query logs are retained for 30 days and lower-resolution analytics for up to one year.checked 15 Oct 2026
- API
- The public API uses dashboard-created bearer tokens with read or write scopes and optional source-IP restrictions.checked 15 Oct 2026
- API limitation
- Control D warns that its API has no versioning and may introduce breaking changes without notice.checked 15 Oct 2026
- Content filtering
- Administrators can choose from 20 content categories and add custom allow or block rules.checked 15 Oct 2026
- Data locations
- Customers can select analytics storage in New York, Amsterdam, or Sydney.checked 30 Sep 2026
- Data protection
- The Trust Center says data is encrypted with AES-256 at rest and TLS 1.2 or higher in transit, and customers can delete analytics data through the dashboard.checked 30 Sep 2026
- Data regions
- Analytics storage can be selected among New York, Amsterdam and Sydney.checked 15 Oct 2026
- Developer tooling
- ctrld supports shell, PowerShell and Docker installation, Go 1.21-plus source builds, CLI management and API or TOML configuration.checked 15 Oct 2026
- DNS protocols
- Control D supports DNS-over-HTTPS, DNS-over-HTTPS/3, DNS-over-TLS, DNS-over-QUIC and legacy UDP port 53.checked 15 Oct 2026
- Downloads
- The GUI utility is distributed as Windows EXE, macOS DMG, Google Play and App Store applications, with managed and native modes.checked 15 Oct 2026
- Filtering
- Control D offers 20 content categories, custom rules, and more than 1,000 premade services that can be blocked or unblocked.checked 30 Sep 2026
- Integrations
- Documented integrations include Asus Merlin, DD-WRT, Firewalla, OpenWRT, pfSense, OPNsense, Ubiquiti, Synology, major operating systems, browsers, RMM tools and Tailscale.checked 15 Oct 2026
- Intended users
- Control D says it is designed for SMBs, enterprises, individuals, and IT administrators seeking customizable DNS security and internet controls.checked 30 Sep 2026
- Limit: G2 reviewers
- Reviewers mention abstract rules, analytics needing improvement, a learning curve, false positives and occasional latency or slow blocklist updates.checked 15 Oct 2026
- Limit: protocol scope
- Control D documents that DNS filtering cannot block the BitTorrent protocol itself and is not a substitute for a VPN or life-critical anonymity.checked 15 Oct 2026
- Limit: Trustpilot complaints
- Critical reviews report strict refund terms, renewal-surprise concerns, setup difficulty, routing delays and legitimate traffic being blocked.checked 15 Oct 2026
The company
- Company
- The About Us page states that Control D was founded in 2021 in Toronto, Canada.checked 30 Sep 2026
- Company facts
- Control D Inc is described as a privately held Toronto computer and network-security company founded in 2021 with 51–200 employees on LinkedIn.checked 15 Oct 2026
- Founded
- 2021checked 23 Sep 2026
- Headquarters
- Toronto, Canadachecked 23 Sep 2026
- Maker origins
- The company says Control D was spun out of Windscribe and was founded by Yegor Sak, Alex Paguis and Mark Ulicki.checked 15 Oct 2026
Where it runs
- Limit: Android app
- Google Play reviewers report the app can lose connectivity after sleep or extended running, while recommending Android Private DNS as a more reliable alternative.checked 15 Oct 2026
- Limit: Apple app
- App Store reviewers request automatic Wi-Fi profile switching, a fuller iOS interface and dashboard administration, and one reports outdated DoH3 UI.checked 15 Oct 2026
Alternatives to Control D
- 1
AdGuard DNS
Free planOpen sourceAndroidiOSWebAPI8.6From $29.88 a year - 2
NextDNS
Free planOpen sourceAndroidiOSWebAPI8.6From £1.79 a month - 3
Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 4
OpenBLD
Free planAndroidiOSWebAPI7.9From $15 a month - 5
DNSFilter
AndroidiOSWebAPI7.8From $1 a month - 6
NxFilter
Free planAndroidWebAPILinux7.6From $60 a year