Webroot DNS Protection
Webroot DNS Protection filters DNS requests for individual devices or entire networks.
What Webroot DNS Protection is
Webroot DNS Protection filters DNS requests for individual devices or entire networks. A Windows agent routes device requests through Webroot, while DNS forwarding protects corporate Wi-Fi, LAN, and guest Wi-Fi, including devices without an agent. Policies cover 80 categories such as malware and phishing domains, and can help block command-and-control access and DNS-based data exfiltration. Administrators can select High or Medium Protection or create custom policies. The agent uses DNS over HTTPS for encrypted resolution, and administrators can control access to other DoH providers. DNS Leak Prevention blocks processes that try to resolve outside the agent; it requires agent version 4.2 or newer and Windows 10 or later. Roaming protection keeps filtering active across networks. A web console provides policy controls and reports on traffic, risky users, categories, and blocked domains. Mac devices can be covered through a protected DNS network. Pricing is by request, with a free 30-day trial.
Good
- Filters 80 DNS request categories
- Encrypted DNS over HTTPS support
- Roaming protection across changing networks
- Custom policies and web reporting
- Covers devices without an agent
Watch out
- No free plan
- Agent installs only on Windows endpoints
- DNS Leak Prevention needs Windows 10+
- Pricing is available on request
Who it suits
Webroot positions this product for managed service providers and small or midsize businesses. It suits administrators needing DNS filtering, roaming enforcement, custom policies, and activity reporting across mixed networks.
Verdict
Webroot DNS Protection combines agent-based and network DNS filtering with encrypted resolution, roaming coverage, and configurable reporting. Check endpoint and DNS Leak Prevention requirements before deployment.
Plans and prices
From Webroot DNS Protection's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Webroot DNS Protection | Priced on request | Business subscription; full product is billed; pricing not shown on the page |
The facts
Each one read from Webroot DNS Protection's own pages, with the date it was checked.
What it does
- Deployment
- The DNS Protection agent is available as an MSI or can be deployed through Webroot Endpoint Protection; the agent can only be installed on Windows endpoints.checked 30 Sep 2026
- DNS leak prevention
- The DNS Leak Prevention feature is described as a device-level DNS firewall that stops processes from resolving DNS outside the agent.checked 30 Sep 2026
- DNS privacy
- The agent sends external DNS requests over DNS over HTTPS (DoH) to Webroot resolvers.checked 30 Sep 2026
- Encrypted DNS
- The agent uses DNS over HTTPS (DoH) for encrypted DNS resolution, while the product can control access to other DoH providers.checked 30 Sep 2026
- Integrations
- The product datasheet states that RMM and PSA integrations help automate operations and that the Unity API and Universal Reporter support customized reports and data extracts.checked 30 Sep 2026
- Intended customers
- Webroot describes DNS Protection as built for managed service providers and small and midsize businesses.checked 30 Sep 2026
- Leak prevention limit
- DNS Leak Prevention requires agent version 4.2 or newer and is supported only on Windows 10 and newer.checked 30 Sep 2026
- Network coverage
- Network filtering can protect devices such as guest or IoT devices without installing an agent on them.checked 30 Sep 2026
- Policies and reporting
- A web-based console provides DNS policy controls and reporting, and administrators can configure how DNS requests are logged.checked 30 Sep 2026
- Privacy
- Administrators can configure what DNS request information is captured to help comply with GDPR.checked 30 Sep 2026
- Protection policies
- Administrators can choose DNS High Protection or DNS Medium Protection policies, or create custom policies.checked 30 Sep 2026
- Purpose
- DNS Protection filters DNS requests to protect individual devices through an agent or network devices through DNS forwarding.checked 30 Sep 2026
- Reporting
- DNS reports include traffic activity, high-risk users, requested categories, and top blocked domains; available history varies by report.checked 30 Sep 2026
- Roaming coverage
- The DNS Protection agent routes DNS requests through Webroot servers to enforce filtering and logging when users are on different networks.checked 30 Sep 2026
- Security hosting
- Webroot says DNS Protection uses its hardened DNS resolver infrastructure hosted within Google Cloud.checked 30 Sep 2026
- Support
- Webroot provides DNS Protection technical support through its business support page, including phone support and a ticketing system.checked 30 Sep 2026
- Threat blocking
- It blocks access to malicious domains, including command-and-control servers, and can help prevent data exfiltration through DNS.checked 30 Sep 2026
- Threat filtering
- Its filtering policies cover 80 categories, including security risks such as malware and phishing sites.checked 30 Sep 2026
- Threat intelligence
- The product uses Webroot BrightCloud Threat Intelligence, which the maker describes as using sixth-generation machine learning.checked 30 Sep 2026
- What it does
- DNS Protection filters DNS requests through an agent on individual devices or by forwarding network DNS requests to Webroot resolvers.checked 30 Sep 2026
The company
- Founded
- 1997checked 28 Sep 2026
- Headquarters
- Broomfield, Colorado, USAchecked 28 Sep 2026
Where it runs
- Mac coverage
- The maker says Mac endpoints can be protected through a DNS Protection network using a VPN or on-site.checked 30 Sep 2026
Money
- Trial
- A full product trial is available free for 30 days.checked 30 Sep 2026
Alternatives to Webroot DNS Protection
- 1

AdGuard DNS
Free planOpen sourceAndroidiOSWebAPI8.6From $29.88 a year - 2

NextDNS
Free planOpen sourceAndroidiOSWebAPI8.6From £1.79 a month - 3

Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 4

Control D
Open sourceAndroidiOSWebAPI8.1From $2 a month - 5

GoodAccess
Free planAndroidiOSWebLinux8.1Free plan - 6
DNSFilter
AndroidiOSWebAPI7.8From $1 a month
