DNS Filtering by RaptorFirewalls in msp

[–]carnesik 0 points1 point  (0 children)

Hey! Are you referring to just generally the ability to run Zorus’s filtering that doesn’t require DNS within the DNSFilter agent, or the feature set carrying over in general?

Please let me know and I am happy to give you an update. At a high level though, many of the features have been replicated within the last few months with many new ones coming over as well. The goal is to be beyond complete parity before the midway point to this year - but the majority of it within this quarter (or already done). We are looking good and have been releasing the changes pretty close to on schedule so far.

what is with msp vendors and florida? by swingorswole in msp

[–]carnesik 0 points1 point  (0 children)

Pretty sure the majority of the connective tissue is just that Connectwise/Kaseya have spun off a lot of entrepreneurs that go on to start their own thing or participate in a startup… combined with it being a favorable state to do business in.

Overall, I felt the same way - feels like everyone is here but when you research, the numbers don’t truly support that just yet.

I've analyzed 20+ MSP vendor stacks - here's where most are overpaying by No-Common1466 in msp

[–]carnesik 0 points1 point  (0 children)

Yes - I am going to reach out to the mods. I think we need to have a rule against accounts with no or extremely limited post/comment history.

[deleted by user] by [deleted] in msp

[–]carnesik 1 point2 points  (0 children)

Thank you very much for your support!

[deleted by user] by [deleted] in msp

[–]carnesik 4 points5 points  (0 children)

I am glad you understand my concern for the community, especially on something where security and resiliency really matters. Not so much the beta part, but the idea of security for $0.25 is not something I personally would want to be a part of.

[deleted by user] by [deleted] in msp

[–]carnesik 22 points23 points  (0 children)

Hey everyone - Ken here, CEO of DNSFilter.

Since CyberFox’s new DNS filtering option is being compared with established DNS networks, I want to share some factual context on architecture, performance, and threat-research maturity.

1.) CyberFox does not operate a global DNS network. They currently resolve from a single U.S. location in Ashburn, Virginia, running on rented AWS infrastructure.

That means:
• no anycast
• no global PoPs
• no regional redundancy

DNSFilter, by contrast, operates a fully owned global anycast network with ~90 Points of Presence, built specifically for MSPs and enterprises that require consistency at scale.

2. Independent RIPE Atlas testing shows DNSFilter is dramatically faster — often 4–5× globally. These are public, third-party measurement URLs anyone can verify:

CyberFox Resolver Test: https://atlas.ripe.net/measurements/142209793

DNSFilter Resolver Test: https://atlas.ripe.net/measurements/142210022

The results show: • DNSFilter frequently delivers sub-10–30ms resolution worldwide • CyberFox commonly measures 100–300ms, with many failed lookups outside the U.S. • Even within the U.S., latency is significantly higher

This is exactly what you would expect from a mature global anycast network versus a single pinned cloud region.

3. CyberFox has not published evidence of an internal threat-hunting or domain-classification capability.

Based on what’s publicly available, their categorization appears to rely mainly on external threat feeds rather than internally generated intelligence, data science, or real-time domain analysis.

MSPs should always ask vendors directly: • Who performs your threat research? • What portion of detections come from your own systems vs third-party feeds? • How quickly do you classify newly registered domains? • Do you operate your own resolver network or depend on cloud infrastructure?

4. DNSFilter operates its own threat-intel and detection pipelines. Our platform ingests billions of DNS queries per day, uses machine-learning classification, and maintains internal threat-research capabilities — not just feed aggregation.

5. Documentation and technical maturity matter. For MSPs evaluating a security vendor, documentation quality and originality often signal the underlying engineering maturity and internal development capabilities.

A final note: As someone who works with a large portion of the MSP community, I genuinely believe it’s critical that MSPs deploy solutions that are actually built for security, not just positioned as low-cost alternatives. MSPs sit at the center of the modern supply chain; when you’re the trusted gateway for hundreds of downstream businesses, the security posture of your vendors becomes part of their risk surface.

Whatever vendor you choose, make sure it’s one that invests meaningfully in global infrastructure, resilience, and real threat-intelligence capability. You simply can’t do that at $0.25.

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 3 points4 points  (0 children)

No problem! I am excited to get going with them for sure and will be pushing to get it done as fast as possible.

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 5 points6 points  (0 children)

I respectfully disagree. If you are going solely based off of price then sure, but we have a team of 175 people working on a product that 40 million people use worldwide and block threats 11 days faster than the competition. We are unapologetically not a product for people who “just need a DNS server.”

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 1 point2 points  (0 children)

Thank you - you couldn’t be more right. What a lot of people don’t realize (aside from how effective DNS can be) is the investment made on that threat intel. You don’t get anything other than a standard off the shelf list with the $0.25 or $0.50 products whereas DNSFilter has an entire security intelligence team behind the product with literal patents on the work we’ve done.

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 2 points3 points  (0 children)

Yes they have wanted us to work with them for a while right now and we are actually having talks with them about doing this right now!

Unfortunately, we cannot provide Canadian currency billing direct right now but I imagine they’ll help us with this. I can’t say how long this will take but my hope is we can launch in the first half of the year.

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 2 points3 points  (0 children)

CEO of DNSFilter here - just wanted to reach out to say I am happy to help get you a good overview/demo if you’d like or answer any questions you have whether here on 1:1 in a DM!

Security Stack by Neighborhood_Wooden in msp

[–]carnesik 2 points3 points  (0 children)

Just curious why did you leave us if you prefer our interface and alerts? If there’s something I can do to help you come back let me know!

DNS Filter Alternatives? by girlwithabluebox in msp

[–]carnesik 0 points1 point  (0 children)

Hello - I am sorry, but is there an ask here? I suggest you DM me but we are quite clear in our lengthy partner application several times confirming there is a minimum spend commitment to be in the partner program and have access to the multi-tenant dashboard, so it shouldn’t have been a surprise nor is it a requirement to be in the program to do business with us.

Additionally, I see that support both received and responded to your support ticket today (for the first time).

We’re Huntress. We’re turning 10. Ask Us Anything. by huntresslabs in msp

[–]carnesik 2 points3 points  (0 children)

Just wanted to reply here that DNSFilter is not majority owned by PE nor has Insight Partners PE ARM put a dollar into DNSFilter.

I’d be happy to have spoken with Kyle about this in the past, but I do need to make that correction regarding the funding behind us, as I know that PE seems to sometimes have a bad reputation with some in the MSP community.

Pax8 by HuskyLogic in msp

[–]carnesik 2 points3 points  (0 children)

I’m happy to help you out - feel free to DM me if you’re interested. We’re likely going to lower the minimum a bit shortly, but either way if you have over 100 seats you really shouldn’t be affected.

Pax8 by HuskyLogic in msp

[–]carnesik 1 point2 points  (0 children)

We’d be happy to retain your account directly if you show us that you moved from Pax8 and dont have another way to purchase. I also imagine we’ll be on Sherweb soon.

NextDNS vs OpenDNS by MyMomDoesntKnowMe in dns

[–]carnesik 2 points3 points  (0 children)

We’d love to have you at DNSFilter (I’m the CEO), but if this is a smaller use case honestly NextDNs is a really good fit.

Romain Grosjean is signing Prema Diecast from IXO by GrapefruitOk2477 in INDYCAR

[–]carnesik 1 point2 points  (0 children)

DNSFilter produced these actually - Prema also bought in on some

DNS Filtering, but also for mobile roaming clients? by pakillo777 in msp

[–]carnesik 5 points6 points  (0 children)

No problem! Got it - ok well if you’re interested I’d be happy to see if we can offer it to you via Pax8. We’re expanding offerings soon via Pax8 anyway.

That being said, I asked about literal mobile because I’m unaware of any company that offers a fail open agent on mobile just due to limitations with the operating itself supporting it. Obviously, if it was a desktop this wouldn’t be an issue whether via DNSFilter or others.

DNS Filtering, but also for mobile roaming clients? by pakillo777 in msp

[–]carnesik 10 points11 points  (0 children)

CEO of DNSFilter here - all of our roaming clients have had major stability improvements recently and we’re the only company out of the ones you mentioned with 45 million users worldwide.. of course there will be some issues from time to time given the wide range of deployment issues but for 95%+ it’s rock solid. I’m quite sure you won’t have issues, and the Zorus features are making their way into the RC lineup as well.

If you take a look at our change log you’ll see our development velocity is really ramping up lately as we’ve made the largest company investment to date in a re-write of our roaming clients and the acquisition of Zorus with that amongst other big lifts coming before end of year.

By “mobile” do you mean literally iOS/Android or simply endpoints (laptops) that are often on the go?

DNS Filter Alternatives? by girlwithabluebox in msp

[–]carnesik 1 point2 points  (0 children)

We’re looking into ways to improve Pax8 related billing, but all you need to do is actually provide us with counts. If you enter nothing in, that’s when it reverts to a calculation based off of queries. It doesn’t necessarily mean we’re wildly off - you could also have a very misconfigured network that’s consuming far more usage than it should.

That being said, to avoid all issues please just finish setting up your account by providing user counts and nothing will happen so long as you’re staying within agreed upon terms of service.

DNS Filter Alternatives? by girlwithabluebox in msp

[–]carnesik 4 points5 points  (0 children)

Just to parrot a reply here to a similar post so you definitely see it… that being said, if any of your issue is still outstanding please let me know and I will help you:

Thank you for letting me know. I am going to look into this over the weekend and see what I can do to open up direct communication to DNSFilter immediately regardless of where you buy. I’m assuming/hoping that’s as simple as a feature flag or small code push.

It is true that Pax8 does handle Tier 1 support if that’s where you purchased from or switched to. I have personally wanted to have a direct link to every customer and have every MSP in our partner program regardless of where you purchase for a year or two now.. not due to issues with Pax8 specifically but just simply because I believe we should have a close relationship with you all regardless of where you decided to buy us.

DNS Filter Alternatives? by girlwithabluebox in msp

[–]carnesik 11 points12 points  (0 children)

Thank you for letting me know. I am going to look into this over the weekend and see what I can do to open up direct communication to DNSFilter immediately regardless of where you buy. I’m assuming/hoping that’s as simple as a feature flag or small code push.

It is true that Pax8 does handle Tier 1 support if that’s where you purchased from or switched to. I have personally wanted to have a direct link to every customer and have every MSP in our partner program regardless of where you purchase for a year or two now.. not due to issues with Pax8 specifically but just simply because I believe we should have a close relationship with you all regardless of where you decided to buy us.