Questions, answered.

Koru Shield is an encrypted DNS filtering service. It checks every website and app address you look up against threat and content lists, and blocks the dangerous or unwanted ones before they can load. It works at the network level, so there is nothing to install on each app.

When a device asks to visit a domain, our resolvers check curated threat intelligence feeds for malware, phishing, scams, cryptomining, and botnet domains. Matches are refused at the DNS level, so the malicious site never loads. Family filters add adult-content and category blocking on top.

No. DNS checks take milliseconds, and blocked junk means fewer malicious scripts and ads load. Your connection typically feels faster, not slower. Our resolvers run in Northern Virginia and Oregon.

No apps required. You change one setting to point your device, router, or network at Koru Shield's resolvers. Setup takes under two minutes per device, with guided instructions for iPhone, Android, Windows, Mac, Linux, and routers.

Yes. On iPhone and iPad, install the one-tap configuration profile and protection applies on Wi-Fi and cellular. Android Private DNS uses DNS-over-TLS, which Koru Shield does not offer. Use a compatible DNS-over-HTTPS app or profile.

Yes. All queries use encrypted DNS-over-HTTPS, so your lookups cannot be observed on the network. We never sell your data, and your data stays in the US. An independent privacy audit is planned and will be published when complete.

Yes. The Koru Shield dashboard shows real-time logs, per-device analytics, and every blocked domain with the reason it was blocked. You can allow or block individual domains from there.

The Free plan includes malware, phishing, and scam blocking, ads and tracker blocking, the family content filter, encrypted DNS, the personal dashboard with live query logs, plain-language block explanations, custom rules, SafeSearch, app presets, recurring schedules, and per-device profiles. Guardian ($5/month) adds 30-day query history and analytics, anti-typosquat protected domains, CSV export, and priority human support. Family Space ($8/month) adds multiple caregiver accounts with roles, per-child profiles, and calendar exceptions. Prosumer ($15/month) adds 2,000 custom rules, local DNS records, REST API and MCP automation, policy simulator, revisions, staged rollouts, and audit trail. See the plans.

No single filter is unbypassable, but we make it hard. Because DNS is enforced at the device or router level and unlinked clients are refused, changing browser settings does not help. The strongest setup is router-level protection with SafeSearch enforced. Family Space already includes per-child profiles, time limits, and SafeSearch enforcement you can manage from the dashboard.

Most VPNs route DNS through their own servers, which bypasses Koru Shield's filtering. To keep protection while using a VPN, configure the VPN to use Koru Shield's resolvers for DNS if your VPN app supports custom DNS.

You see a clear block page explaining what was stopped and why, with a one-click option to allow it. Allowlisting takes effect immediately across your profiles.

Both offer encrypted DNS filtering. Koru Shield's free plan never silently degrades to unfiltered resolving past a query quota, includes human support on every plan, and keeps your data in the US. NextDNS offers deeper configuration for power users and a global network. Read the full comparison.