A clearer path
to a controlled web.

ONE CONNECTED WORKSPACE

Move from activity
to understanding.

Manage web filtering policies, browser profiles, device enrollment, query history, and administrator activity from one console. Use policy diagnostics to understand why a request was allowed or blocked.

The interactive tour is a product experience concept with sample data. It does not operate a live deployment.

PROTECTION LAYER 01

Start at the first request.

DNS filtering controls access at the domain level. Use explicit allow and block rules, maintained blocklists, and encrypted upstream resolution to define which destinations your network can reach.

• Domain and subdomain control. Apply clear rules across a domain and its descendants.
• Managed blocklists. Use optional community-maintained feeds and automatic refresh.
• Explainable decisions. Inspect the local rule responsible for an allow or block.
• Operational continuity. Caching, upstream failover, and last-good-copy feed retention support day-to-day operation.

PROTECTION LAYER 02

The useful web,
with clearer boundaries.

Manage URL access and category rules across Chrome, Chromium, and Edge. Apply organization, group, and desktop profile rules in a defined order so the effective policy can be understood.

• URL and category controls. Match domains, paths, and configurable categories.
• Browser profiles. Enroll desktops, assign groups, and rotate or revoke profile credentials.
• Sanitized reading. Offer text-focused reading with checked links and reduced tracking parameters.
• Native account context. Associate browser profiles with desktop OS account identity.

Managed browser deployment is needed for enforcement. An unpacked extension is removable, and ordinary page inspection is not pre-execution malware isolation.

PROTECTION LAYER 03

Give your policies
some follow-through.

Signed network policy extends control beyond the browser. Specify approved destinations, DNS servers, ports, and interfaces, with verification and enforcement supervision on enrolled devices.

• Signed policies. Verify policy integrity and protect against rollback.
• Drift repair. Supervise enforcement and restore the intended firewall rules.
• Quarantine and restore. Use defined management and recovery workflows.
• Explicit expiry. Expired policy moves the endpoint into management-only quarantine.

DEPLOYMENT

Your environment.
A deliberate rollout.

The current platform is self-hosted. Your organization operates the management service, controls local data, and decides how DNS, browser profiles, and endpoint policies are deployed.

Engineering installation instructions are available in the technical deployment guide. Team support, managed services, and enterprise rollout assistance are still in development.

Find your starting point.