Is Koru Shield actually protecting you?

How to check

The most reliable way to confirm protection is active is your own query log, not guesswork. Open the dashboard at my.korushield.com and look at the protection status card on Overview. Then open Activity > Query logs for the device you want to check. Recent entries mean the device is sending its lookups to Koru Shield right now. You can also run the live verification challenge under Setup > Verify this device, which asks your device to look up a test hostname and confirms the answer came back through Koru Shield.

What the block page looks like

When Koru Shield stops something, you do not get a mysterious browser error. You get a clear explanation page that states what was blocked, which category or rule caused it (for example, phishing, malware, or the family filter), and a way to allow the site yourself if you believe it was blocked in error. If a page fails to load with no explanation at all, that is usually a sign the device is not pointed at Koru Shield, or that a different kind of network issue is going on, see troubleshooting.

What to do if a bad site loads

No filter catches everything the instant it appears. If you land on something that looks like a scam, phishing attempt, or malware and it was not blocked:

1. Confirm the device is actually pointed at Koru Shield. Check Activity > Query logs for recent entries from that device; if there is nothing recent, the device has fallen back to its normal DNS and is not protected right now.
2. Check whether an app or browser is using its own built-in secure DNS or a VPN, which can bypass the system resolver and skip Koru Shield entirely. Turn that off so the device uses the system resolver.
3. Report the domain so it can be added to the blocklists. Use the Report button on the matching entry in your query log, or email the domain to contact@korushield.com.