Proactive Defense Against Botnets and Criminal Malware

Research leveraged by ThreatSTOP is emerging as the method to address this growing problem and is becoming a required component of an effective layered defense against cybercriminals

ThreatSTOP is a service that delivers threat intelligence to your DNS Servers, firewalls, routers (and more) and automates everything to proactively block threats.

Cost-effective protection from Botnets and Malware for everyone from small businesses to multinationals and government agencies of all levels.

The service provides a feedback loop for customers’ log data to become part of its threat feeds to further enhance the coverage, timeliness, and accuracy of its Threat List and thereby better protect every member of the ThreatSTOP user network.

Get Started

Learn More

How it works?

We’re Built to Block Threats

Get Started

Learn More

Choose The Server

Pick the DNS Server you want to transform into a DNS Firewall. Select standard policies or create your own custom policy in our customer portal.

Apply The Rules

Apply any number of action rules. For example, attempts to contact botnet C&C servers can simply be denied, while users who click on phishing links see a redirection to a walled garden.

Automation Kicks In

All rules are automatically downloaded from the portal and are added to the BIND DNS server configuration files. The DNS server automatically downloads the policy and applies it to all lookups it receives.

Automatically Updated

The policy is automatically updated (by default this is every two hours) so that the policy can block new threats and no longer block access to locations that have been remediated.

We Do The Rest

RPZ takes action based on the domain name queried (QNAME), the IP address returned (RPZ IP) or the fully qualified domain name (FQDN) or IP address of any of the name servers used in the resolution process (NS IP and NS DNAME).