/Companies

DNSFilter

Techstars '18

Washington, US · Founded 2015 · Delaware corporation · 188 employees on LinkedIn · 5 known investors

Find your way into DNSFilter

Sign up to see every warm intro you have to DNSFilter

  • Paths you didn't know you had: your email and LinkedIn already hold routes to the DNSFilter team. We find them for you
  • 2nd- and 3rd-degree connections: the friend-of-a-friend routes that take hours to manually find through your inbox or LinkedIn
  • Answers now, not in days: momentum is everything in a raise. Skip asking around whether someone knows someone

Days of research, done the moment you sign in, with every route ranked by how warm it is.

DNSFilter provides DNS security filtering that sorts malicious from legitimate DNS requests to protect users during work. The company serves security-conscious organizations seeking to enhance their network security.

Also known as DNS Filter

Founders & leadership

DNSFilter was founded in 2015 by Ken Carnesi and Kenneth B. Carnesi, Jr..

KCKen Carnesi
Ken CarnesiCEO and Co-founder
KBKenneth B. Carnesi, Jr.
Kenneth B. Carnesi, Jr.Co-founder
BGBrian Gillis
Brian GillisChief Architect

Board

RKRyan Kruizenga
Ryan KruizengaBoard directorGeneral Partner at Arthur Ventures
TKThomas Krane
Thomas KraneBoard MemberManaging Director at Insight Partners
DA
Dmitri AlperovitchBoard director

Investors · 5

Reported raises · per SEC filings

Form D private placements

$60.8M disclosed across 4 of 6 rounds · 2019–2023

▶$15MraisedAug 2023 · 6 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Jon OberheideDirector
  • Kenneth B. CarnesiExecutive Officer
  • Ryan KruizengaDirector
  • Thomas KraneDirector
Offering amount
$15M
Amount sold
$15M
First sale
Aug 2023
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
▶$10.8MraisedMay 2023 · 7 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Ryant KruizengaDirector
  • Kenneth B. Carnesi, Jr.Executive Officer
  • Thomas KraneDirector
Offering amount
$10.8M
Amount sold
$10.8M
First sale
Aug 2022
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
▶$29.5MraisedJul 2021 · 8 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Dmitri AlperovitchDirector
  • Ryan KruizengaDirector
  • Thomas KraneDirector
  • Kenneth B. Carnesi, Jr.Executive Officer
Offering amount
$29.5M
Amount sold
$29.5M
First sale
Jun 2021
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
▶$5.5MraisedDec 2019 · 15 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Kenneth B. Carnesi, Jr.Executive Officer
  • Michael SchrollDirector
  • Ryan KruizengaDirector
Offering amount
$5.5M
Amount sold
$5.5M
First sale
Nov 2019
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗

Source: SEC EDGAR Form D. Amounts as filed; amended filings shown once at their latest values.

Company profile

researched Sep 2026

DNSFilter provides cloud-based, AI-driven DNS filtering, content filtering and threat protection. Its service inspects Domain Name System requests made on a customer's network against DNSFilter threat feeds and customer-defined policy settings; requests to malicious or blocked domains are diverted before the connection is established, protecting any device that relies on DNS, including servers, computers, printers and tablets. Deployment requires no hardware or proxies: customers point network DNS forwarders at DNSFilter or install a lightweight Roaming Client on Windows, macOS, iOS, Android and ChromeOS devices so that policy follows users off-network.

The platform's capabilities include content filtering across dozens of categories with SafeSearch and customizable allow/deny lists (up to 15,000 domains per filtering policy), threat blocking for malware, phishing, botnets and cryptomining, Malicious Domain Protection that scores hostnames with machine learning to catch zero-day and newly registered domains, AppAware one-click application blocking covering more than 400 SaaS applications, Universal block/allow lists, DNSSEC, single sign-on, Insights Reporting dashboards with CSV/PDF export and raw log streaming to Splunk, Elastic and Amazon S3, and data export with SIEM integration. CyberSight, launched as a behavioral analytics and intelligence capability, surfaces shadow IT and SaaS spend. Integrations include PSA platforms used by MSPs (ConnectWise, Autotask, Halo, Syncro, Kaseya BMS), Rewst, Zapier, CrowdStrike and an open API with webhooks.

Use cases span business networks, hybrid and remote workforces, guest and public Wi-Fi in cafés, hotels, churches and short-term rentals, public transit wireless networks, retail, and education, where the service is positioned to help schools meet CIPA requirements. DNSFilter works with US and UK governmental organizations on threat data and applies Internet Watch Foundation and Project Arachnid filtering for all customers.

Founding story

DNSFilter was founded in October 2015 by CEO Ken Carnesi and Chief Architect Brian Gillis, who considered existing DNS security products overpriced, outdated or ineffective and set out to build a filter Carnesi would trust for himself and his clients. The company started with three people and chose a literal name describing the product: filtering DNS requests to separate good from bad.

Business model

Subscription software-as-a-service sold directly to enterprises and small businesses and through a managed service provider partner channel, with free trials, guided product tours and demos as entry points. In 2026 the company added an OEM program offering three partnership models that let ISPs, security vendors and device makers embed DNSFilter's DNS-layer protection and encryption under their own brands, supported by a developer sandbox and API.

Paid subscriptions to the DNSFilter platform, with tiers for enterprise and small business, MSP partner distribution, and OEM licensing of its DNS protection to third-party products.

Traction

As of the current website, DNSFilter reports more than 57,000 organizations protected, over 6,000 MSP partners, 235 million threats blocked daily and 200 billion daily queries. At the September 2023 Series A extension the company reported over 150 employees worldwide, more than 27 million monthly end users and nearly 30,000 organizations. At the July 2021 Series A it reported over 14,000-15,000 brands and 4 million end users. Its about page cites a first customer in 2016 and a first investor in 2017.

Latest developments

Recent announcements include the launch of CyberSight, a behavioral analytics and intelligence capability within the DNSFilter platform; a July 2026 OEM program allowing ISPs, security vendors and device makers to embed DNSFilter's DNS-layer protection and encryption in their own products; a new MSP partner program; publication of the 2025 Annual Security Report; and survey findings on gaps between executive and practitioner confidence in AI-related cyber resilience, including a 32.5% shadow-AI incident rate and 40% of organizations reporting a security incident tied to a third-party SaaS or AI tool in the prior 12 months. Three DNSFilter employees were named to CRN's 2026 Women of the Channel list.

▸Full profile — market position, technology, go-to-market, geography, history

Market position

Positions itself as a protective DNS and AI-powered content filtering vendor competing with legacy, list-based and hardware-centric web filtering and firewall products. The company states it catches threats an average of 10 days before third-party threat feeds (5 days as stated in 2021) and claims an industry-low false-positive rate. Its 2021 Series A was described as tied for third largest cybersecurity Series A of that year, and the company has been named to Business Insider's list of 19 cybersecurity companies to know and won Cyber Defense Magazine Global InfoSec Awards for internet filtering and protective DNS.

Real-time AI categorization of never-before-seen domains rather than reliance on static block lists, Malicious Domain Protection that identifies zero-day domains an average of 10 days ahead of traditional feeds, one-click application blocking that bundles all hostnames behind a SaaS app, hardware-free deployment in under an hour, roaming protection without VPN backhaul, and a dual Anycast network engineered for low latency and automatic failover.

Technology

Proprietary AI and machine-learning models scan billions of domains daily, scoring hostnames on traits such as domain age and suspicious naming and detecting domain generation algorithms, with newly registered domains categorized in real time in an average of 5-15 seconds. Website categorization is powered by Webshrinker machine learning; categorization scanners support 20 languages and block pages display in nine. Filtering decisions are enforced before the TCP handshake. The service runs on a dual Anycast network of more than 200 points of presence across 70 cities with independent backbones and BGP failover, reporting sub-30-millisecond median response times; the transit provider has over 2,300 BGP peers and 19-plus internet exchange memberships. Threat intelligence combines community-managed feeds, government threat data, anonymized data-exchange partnerships with other security firms, and in-house machine learning.

Go-to-market

Self-service free trials and guided product tours plus direct sales and demos, combined with a large MSP partner channel supported by no-cost PSA integrations and a partner program; an OEM program extends distribution through ISPs, security vendors and device makers. Marketing assets include an annual security report, webinars, whitepapers and case studies, and the company promotes third-party review-site ratings (G2, Capterra, Gartner) and migration paths from competing products such as Cisco Umbrella.

Businesses of all sizes from SMBs to multinational enterprises, managed service providers, education institutions subject to CIPA, operators of public and guest Wi-Fi such as cafés, hotels, churches and short-term rentals, public transit wireless providers, and retail brands. Named customers have included Lenovo, Newegg, The Salvation Army and Nvidia.

Geography

Headquartered in Washington, D.C., with a global workforce and customers worldwide; its Anycast network spans more than 200 points of presence across 70 cities, and it works with US and UK governmental organizations on threat data.

History

After launching in 2015, DNSFilter signed its first customer in 2016 and took on its first outside investor in 2017. It acquired Webshrinker in 2018, which underpins its domain categorization and threat efficacy, and tripled its team in 2019 while expanding features such as Roaming Clients. Arthur Ventures led a seed round in 2019. Growth continued through 2020, and in July 2021 Insight Partners led a $30 million Series A, reported by the company as a $33.5 million round with Arthur Ventures. In 2022 DNSFilter acquired Guardian, a privacy-protecting mobile firewall for iOS and Android. In August 2023 it raised a $15 million Series A extension from Insight Partners, announced that September. It won a Global InfoSec Award for Protective DNS in 2024 and acquired MSP security vendor Zorus in 2025. The company was a member of the inaugural Techstars Anywhere class.

Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.

Key figures

latest reported
Anycast network citiesJan 202670 cities
Anycast points of presenceJan 2026200 PoPs
Brands/customersJul 202114,000 brands
Daily DNS queriesJan 2026200,000,000,000 queries/day
EmployeesJan 2025140 employees
End users protectedJul 20214,000,000 end users
Monthly end users protectedSep 202327,000,000 end users
MSP partnersJan 20266,000 partners
Organizations protectedJan 202657,000 organizations
Share of domain-based threats uniquely identifiedJul 202176%
Threat detection lead time vs competitorsJan 202610 days
Threats blocked dailyJan 2026235,000,000 threats/day

Company-reported or press-reported figures, each dated to when it was claimed — not independently audited.

Related companies · 8

Cloudflare, Inc.Cloudflare provides a global cloud network platform delivering security, performance, and development services through sixty-plus integrated services including SASE, application security, and full-stack development infrastructure.
CiscoCisco Systems designs and sells networking hardware, software, and services—including routers, switches, and cloud-based applications—to enterprise, service provider, and consumer markets globally.
SpiceworksSocial business network for IT that is transforming how $1 trillion worth of technology products and services is marketed and sold each year to small and mid-sized businesses worldwide.
Palo Alto NetworksPalo Alto Networks provides cybersecurity platforms and services to protect organizations' digital infrastructure across cloud, network, and security operations. The company serves enterprise organizations, governments, financial institutions, utilities, and healthcare providers globally.
Check Point SoftwareCheck Point Software Technologies is a cybersecurity company providing security products and solutions. This page is its investor relations section, containing annual reports, SEC filings, financial results, and corporate governance information.
Instart LogicProvides a digital experience cloud that dramatically improves web application consumer experience, engagement and revenue.
InfobloxInfoblox provides DNS, DHCP and IP address management (DDI) along with DNS-based security services for hybrid and multi-cloud enterprise networks. Its cloud-native, SaaS-based platform serves large organizations, helping NetOps, SecOps and CloudOps teams manage core network services and security.
DnsmadeeasyDNS Made Easy provides managed DNS services for businesses of any size, offering DNS management, threat protection, and low-latency performance. The service targets IT teams with high-uptime, high-performance DNS infrastructure.

Companies working in the same space as DNSFilter.

Acquisitions · 1

Early investors' stakes continue via these deals
Zorus

Cutting-edge cybersecurity platform for MSPs

Timeline · 13

launches, deals, and filings
Jul 2026
DNSFilter launches OEM program

Program lets ISPs, security vendors and device makers ship DNSFilter's DNS-layer and encryption protection under their own brand, with three partnership models, no platform lock-in, and a developer sandbox and API.

source ↗

Jan 2026
Three DNSFilter leaders named to CRN 2026 Women of the Channel

Kate Trojanowski, Virginia McKeon and Wasam Youssef recognized by CRN, a brand of The Channel Company.

source ↗

Jan 2026
Launch of CyberSight

Behavioral analytics and intelligence capability within the DNSFilter platform for modern security teams, surfacing shadow IT and SaaS spend.

source ↗

Jan 2026
New MSP Partner Program launched

source ↗

Jan 2025
DNSFilter acquires Zorus

Acquisition intended to combine the two products into a security offering for MSPs.

source ↗

Jan 2024
Global InfoSec Award for Protective DNS

Awarded by Cyber Defense Magazine for its Protective DNS solution.

source ↗

Aug 2023
$15M Series A extension from Insight Partners

DNSFilter raised an additional $15 million from Insight Partners in August 2023, announced in September 2023, to fund expansion, R&D on protective DNS and web filtering, customer success and leadership hiring.

$15M source ↗

Jan 2023
Global Infosec Award in Internet Filtering category

source ↗

Jan 2023
Jon Oberheide joins board

Jon Oberheide, former CTO and co-founder of Duo Security, was named a DNSFilter board member.

source ↗

Jan 2022
DNSFilter acquires Guardian

Acquired Guardian, a privacy-protecting 'smart firewall' for iOS and Android that blocks apps from sharing users' personal information with third parties.

source ↗

Jul 2021
DNSFilter closes $30M Series A led by Insight Partners

Insight Partners led a $30 million Series A, with participation from Arthur Ventures, lead investor in the 2019 seed round. Thomas Krane of Insight Partners joined the board. Proceeds were earmarked for R&D and hiring more than 80 employees globally over 12 months.

$30M source ↗

Jul 2021
Dmitri Alperovitch and Thomas Krane join board

CrowdStrike co-founder and former CTO Dmitri Alperovitch joined the board shortly before the Insight Partners investment; Insight principal Thomas Krane was appointed a director with the Series A.

source ↗

Jan 2018
DNSFilter acquires Webshrinker

Acquisition of Webshrinker, whose machine learning domain categorization powers DNSFilter's threat efficacy and expanded its product offering.

source ↗

Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.

Legal entities · 1

corporate structure
DNSFilterDelaware

In the news

▸Research sources · 8

primary sources listed

8 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does DNSFilter do?
DNSFilter is a cloud-based protective DNS company that uses AI to filter malicious and unwanted domains before they resolve.
Who founded DNSFilter?
DNSFilter was founded by Ken Carnesi, Kenneth B. Carnesi, Jr. in 2015.
Who are DNSFilter's investors?
DNSFilter's investors include Insight Partners, Arthur Ventures, Gula Tech Adventures, Inner Loop Capital, Techstars.
How much funding has DNSFilter raised?
DNSFilter has disclosed $60.8M raised across 4 of its 6 known rounds.
Where is DNSFilter headquartered?
DNSFilter is headquartered in Washington, US.