BastionDNS — DNS Security by Boundary Logic Labs

About

Stop threats before they load — without slowing down your browsing.

BastionDNS brings the protection of Boundary Logic Labs' DNS security platform directly into your browser. Every time you navigate to a site, BastionDNS checks whether that domain is a known threat. If it is, the page is blocked and you see a clear warning instead of a malicious site.

The key difference: your traffic is never routed through us. Unlike a VPN or proxy, BastionDNS does not carry your data. Only tiny domain lookups are sent for checking — your actual page loads, videos, and downloads connect directly, at full speed. No bandwidth bottleneck, no privacy trade-off.

What it blocks
• Malware & command-and-control domains
• Phishing & credential-harvesting sites
• Scam, fraud, and malvertising domains
• Backed by 2.1M+ domains across 8 live threat-intelligence feeds (StevenBlack, Hagezi, URLhaus, ThreatFox, Phishing Army & more), refreshed every 24 hours

Features
• ⚡ Real-time protection on every page navigation
• 🛡️ Clean block page showing why a site was stopped
• 📊 At-a-glance popup: protection toggle, blocks-today counter, recent-blocks log
• 🔢 Toolbar badge with your live block count
• ⚙️ Optional per-client policy via your tenant ID
• 📈 Optional reporting to your BastionHQ dashboard
• 🔒 Fails open — if the service is ever unreachable, browsing is never interrupted

Privacy: BastionDNS only sends the hostname of the site you're navigating to (e.g. "example.com") to check it against threat feeds. It does not send page contents, full URLs, form data, or your browsing history. Privacy policy: https://boundarylogiclabs.com/privacy

Built by Boundary Logic Labs — https://boundarylogiclabs.com