Customizable Defense through Flexible Security Policies

Empowering Organizations with Granular Control Over DNS Protection

Securd offers unparalleled flexibility in DNS security management, putting you in complete control of how your systems are protected. This comprehensive suite of customizable options allows organizations to fine-tune their DNS security posture to match their specific requirements and risk tolerance.

Key Customization Areas:

1. Policy Settings: Fundamental controls for DNS behavior

2. Security Settings: Pre-configured protection against known threats

3. Zero Trust Settings: Advanced domain trustworthiness assessment

4. Allow/Block List Settings: Custom rules for specific domains and networks

5. External Logging Settings: Real-time integration with security tools

Detailed Customization Options

Policy Settings

Securd provides a range of policy settings to fine-tune your DNS security:

• Internal Domain Suffix Bypass: Ignore local network domains to prevent interference with internal DNS resolution.

• Private Network Resolution: Control resolution to private networks, mitigating risks of DNS rebinding attacks.

• Response TTL: Set block page time-to-live, balancing user experience with security enforcement.

• Require DNSSEC: Enforce DNSSEC for all queries, enhancing protection against DNS spoofing.

• Default Action: Set implicit allow or deny for queries, determining your base security stance.

• URL Proxy: Enable inspection of high-risk URLs, adding a layer of protection against malicious links.

• Block Page: Select the type of block page displayed, customizing user notification for blocked access.

Security Settings

Securd offers out-of-the-box protection against 10+ categories of malicious domains. These are maintained by our dedicated security operations team 24/7, ensuring you're always protected against the latest threats.

Zero Trust Settings

Graph Defense™ (Beta) is a proprietary ranking and domain trustworthiness system developed by DigitalStakeout. This advanced feature provides cutting-edge threat assessment capabilities, with continuously evolving algorithms for predictive threat detection.

Allow/Block List Settings

Customize your protection with granular control:

• Custom Domain Block List: Immediately block specified hosts or domains for rapid response to known threats.

• Custom Domain Allow List: Instantly allow trusted hosts or domains, reducing false positives.

• Custom Network Block List: Block resolution to specified networks, preventing access to malicious infrastructure.

• Custom Network Allow List: Allow resolution to trusted networks, ensuring access to critical resources.

External Logging Settings

Push passive DNS logs in real-time to XDR, SIEM, or logging tools. Securd supports both HTTP and Syslog protocols for broad compatibility, enabling comprehensive security event monitoring and analysis.

Best Practices for Customizing Securd DNS Security

1. Regularly review and update custom allow/block lists

2. Tailor policy settings to align with your organization's risk profile

3. Leverage Graph Defense™ for enhanced zero-trust security

4. Integrate external logging with your existing security infrastructure

5. Periodically audit and adjust settings based on threat intelligence

DNS Security with Securd's Customization Power

In the complex landscape of modern cybersecurity, Securd's highly customizable DNS protection offers a powerful solution for organizations seeking to tailor their security posture. By providing granular control over DNS policies and behaviors, advanced zero-trust capabilities, flexible allow/block list management, and seamless integration with existing security tools, Securd empowers organizations to create a DNS security environment that precisely matches their needs, ensuring robust protection without compromising on operational efficiency.Securd offers unparalleled flexibility in DNS security management, putting you in complete control of how your systems are protected. This comprehensive suite of customizable options allows organizations to fine-tune their DNS security posture to match their specific requirements and risk tolerance.