Threats stopped at the name
Malware, phishing and scams blocked for every device, even those nothing can be installed on; look-alike names, data leaks through DNS and DNS rebinding detected.
Small businesses
DNS filtering for small businesses
Warda Business protects every device of the office — computers, phones, printers, servers — from one box on your network: malware, phishing and look-alike names blocked, the rules of a company from the start, and the history of the queries kept on your premises.
What Warda does
One box, and the whole office is protected
The rules of a company
Adult content, gambling, piracy, bypasses and mining pools blocked from the start (beta); groups of employees and servers, with rules for everyone.
Who may do what
Groups of accounts with roles from a catalogue, every change written to the activity log; unblock requests approved or refused by an administrator.
Three steps
How DNS filtering works in a company
Warda answers the DNS requests of the whole network from a box at your premises. Nothing is installed on the workstations and nothing is decrypted: only the names asked and the addresses answered are read, on the box.
-
1
Install Warda on a Debian server, a virtual machine, Docker or a Raspberry Pi.
-
2
Set it as the DNS server of the network, or let it give the addresses with its DHCP server, then create the groups of employees and servers.
-
3
Turn on the rules of a company, then follow the alerts and the security score from the dashboard.
Warda Business
What Warda Business adds
Everything in the subscription, plus what a company needs. The functions marked beta are open to everyone during the beta test period.
- Company baseline rules: adult content, gambling, piracy, bypasses and mining pools blocked from the start (beta).
- Unblock requests: an employee asks for 15 to 60 minutes or for good, with a justification; an administrator approves or refuses, and the history keeps every request (beta).
- Export to your SIEM (Wazuh, Graylog, Elastic, Splunk, Sentinel): alerts, administration log and names blocked, over syslog in JSON or CEF (beta).
- Data loss prevention (DLP) at the DNS level: file transfers, personal storage, webmail and AI assistants allowed, reported or blocked for a group, a person or a device (beta).
- Security center: a score out of 100 and the actions to take in order of priority (beta).
- Users of Active Directory, OpenLDAP, Microsoft Entra ID or Google Workspace imported every hour, who sign in to Warda with their directory account (beta).
- High availability with two boxes and one shared address, protection outside the home included; several sites followed from one box (beta).
- Company reports, ready to print (beta).
What a DNS filter does not replace
A DNS filter is one layer of the security of a company, not the whole of it. Here is what it does not do.
- It reads names, not content: it replaces neither an antivirus or an EDR on the workstations, nor a firewall.
- It does not open HTTPS: the data loss prevention acts on the name of a service (a transfer site, a webmail), not on the files sent. The HTTPS inspection is planned, on the devices chosen and never without the knowledge of the people concerned.
- Telling the employees is up to the company: Warda gives a text ready to inform them.
- The actions on every site at once (rules given to every site, updates, reports gathered) are not done yet: they are on the roadmap.
Questions
How much does Warda Business cost?
3 € excl. VAT per user a month, capped at 29 € excl. VAT a month per site, or 30 € excl. VAT per user a year, capped at 290 € excl. VAT per site. During the beta test period, Warda Business is open to everyone.
Does anything have to be installed on the workstations?
No. Warda runs on a box of your network and answers the DNS requests of every device: workstations, phones, printers, servers.
Is HTTPS traffic decrypted?
No. Only the names asked and the addresses answered are read, on the box. The HTTPS inspection is planned for the paid plans, only on the devices chosen and never without the knowledge of the people concerned; banks, health and personal messages are never opened.
Where does the data stay?
The history of the queries stays on the box, at your premises. With the SIEM export, the alerts, the administration log and the names blocked go to your own SIEM.
Does it work on several sites?
In beta: the boxes of distant sites join with a code and are followed from one manager box (health, version, counts). The actions on the sites come next.
Try Warda Business
Warda Business is in beta, open to everyone during the beta test period.