How CleanBrowsing Works

CleanBrowsing is a DNS-based filtering service. We empower administrators to enforce their acceptable use policies on their internet.

You can restrict access to adult content like pornography and obscene content, but also block other categories like Gambling, Torrents, Gaming, Social media, and other similar categories (total of 20 predefined filters). We provide control and visibility to what is happening on your network.

We help you create safe browsing experiences.

Start Filtering Here
Starting as low as $75 / year

CleanBrowsing is a DNS-based content filtering (DNS Filter) service that allows you to create a safe browsing experience on your network.

Technically, we are a DNS resolver. DNS resolvers are a core piece of how the internet works. Every device connecting to the internet makes use of DNS.

Leveraging this technology allows us to provide a installation free cloud service that can filter requests made to the internet from your device or network.

With CleanBrowsing you have the ability to filter things like pornography, obscene and malicious content, and a slew of other online categories that might be deemed inappropriate for your network.

We offer free and paid filtering options, where the free service is fixed and the paid services are customizable.

How the CleanBrowsing DNS Resolver Works

DNS Anycast Network

The CleanBrowsing is built on an anycast network with over 50+ datacenters around the world. It leverages a proprietary machine learning platform for discovery and classification of new domains. As a DNS resolver, it is limited to filtering Fully Qualified Domain Names (FQDN)

Key highlights of our architecture include:

  • Redundancy through clustered environments
  • Redundancy through unique network pairs
  • Availability through a global anycast network (+ 50 POP)

Your Privacy

We built privacy and security into our network as a default tenant.

We were one of the first providers to support DNSCrypt (port 8443), DNS over TLS (port 853) and DNS over HTTPS (port 443) by default on our Anycast DNS network. DNSSEC is also enforced and validated.

When it comes to privacy, we have a very simple philosophy: Data that does not exist can not be compromised. We also believe that you should be in control of your privacy, so our free (public) filters do not log anything. It's part of our Privacy first. mantra.

Customers can choose what kind of logging they want (i.e., none, some, or a lot).

Don't find what you're looking for? Drop us a line...

We love working with individuals and organizations to better understand what they need, and how we can help.

Get In Touch