Which sites must stay blocked
Unsafe and malicious sites, and any categories your business needs blocked.
Technology guide
DNSFilter checks each web address against its threat and category rules before a connection opens, on devices in the office and away from it. It is the layer that catches the click a phishing email still gets. Kritical can quote it, set it up and agree the rules with you, to keep unsafe sites blocked.
On this page
Jump to the part that matches the problem or decision in front of you.
DNSFilter describes a DNS-based security and content filtering service. It checks each domain request against threat and content rules before a connection opens, can filter by content category or block specific apps, and works on devices on and off the office network without extra hardware. It also provides reporting and logs.
The product is the easy part. The rules are where the value sits, and they are easy to misjudge.
Unsafe and malicious sites, and any categories your business needs blocked.
A named person, and how quickly they can act on an unblock request.
Office computers, laptops at home and mobile phones.
Three situations bring people here.

Phishing reaches inboxes and you want a net under the click.
The office firewall does not see a laptop at home.
You need reports of what is blocked and who reviews it.
DNS filtering is simple to switch on and easy to misjudge. The setup decides what it protects.
Office computers, laptops that leave the building and the guest Wi-Fi, so nothing is left outside the filter by accident.
We start with threats and unsafe sites, then agree any further categories with the people responsible for them.
We try the common sites your staff use and the ones that have caused trouble, so a good site is not blocked on day one.
A named person approves an unblock request and we set up how requests reach them and how fast they are answered.
We start with your devices, your users and the sites they must and must not reach. We quote DNSFilter and the setup work together, then configure it and test it with you. There is no fixed price because it depends on the number of users and locations.
A conversation does not need a finished plan to start.
We talk through your users, where they work and the sites that have caused trouble. No commitment.
You receive a plain-English quote that shows the product and the setup work separately.
We set it up, test it and show your people how it works before we hand it over.
Open the relevant service for the scope, delivery approach and next step.
Business email compromise is a message that looks like it came from your boss, your supplier or your bank and asks someone to pay, change bank details or sign in.

Kritical assesses configuration, prioritises remediation and implements agreed security improvements across identity, endpoints, networks and infrastructure.
Your people should be able to pick up a managed device in the office, at home, at a client site, in a hotel, cafe or airport and keep working without bypassing security to get things done.
When something stops working, your team should know exactly where to turn and roughly when it'll be fixed.
When computers, email, access, security and business software need attention at the same time, Kritical works out what to fix first, what to manage ongoing, and what it will cost — in writing, before you commit to anything.
When a hard problem crosses infrastructure, identity, applications, security and AI, Kritical aims to provide continuity through a consistent lead or delivery group where the agreed scope and service model support it. The proposal sets out the contact model, cover and handover arrangements so ownership remains clear. We price the work in writing and hand over the agreed operating information.
Use the vendor guide to understand the platform, then talk with Kritical about making it work in your environment.
Read DNSFilter’s description of its filtering service, then agree which sites to block and who approves exceptions.
DNSFilter says the check happens as the address is looked up. We test it on your devices during setup and tell you what we see.
Yes. Exceptions are approved by the person you name, and we set up the process with you.
No. It stops bad sites, and email filtering stops bad messages. They work best together.
Tell us how many users and devices you have and where they work. Never include passwords or confidential records.
Tell us what you want to achieve, what you have today and when it matters.