OllaDNS

About OllaDNS

OllaDNS is a multi-tenant DNS filtering and security platform for blocking phishing domains, malware command-and-control, DGA (domain generation algorithm) domains, and brand typosquats at the DNS resolver level. It supports DoH, DoT, and DoQ resolvers, and is built API-first with an MCP-native design: all configuration (policies, devices, audit events) is handled through a 57-endpoint REST API or 54 MCP tools rather than the dashboard, which is intentionally read-only and used only for reporting. Authentication uses JWT for human users and scoped API keys for agents and automated workloads, with per-key expiry and scope gating.

The platform includes an inline DGA classifier (~280 lines of Rust using entropy, n-gram, and vowel-ratio features) and a typosquat detector (~230 lines using Damerau-Levenshtein distance with Cyrillic homoglyph normalization), stacked on a catalog of 67 community blocklists across categories. Additional policy features include custom block/allow rules with wildcards, DNS rewrites, safe-search, parental controls, NRD and TLD blocking, and allowlist-only mode. Every configuration change is recorded in an audit log with the associated actor, and outbound webhooks (HMAC-SHA256 signed) can be subscribed to policy or threat events for SIEM integration. The full stack, including the Rust API, database migrations, and dashboard, is open source on GitHub.

OllaDNS is pre-customer and pre-revenue, currently at v0.34 (shipped May 2026), running in a single US region with a EU-West region planned next. It does not currently offer native desktop, mobile, or router clients, relying instead on DoH-capable clients pointed at a tenant-specific URL. SOC 2 Type II observation is in progress with a report expected Q3 2026; ISO 27001 has not been pursued and HIPAA BAA is not currently offered. The company is seeking 3-5 design-partner teams, offering a free Pro tier through 2026 in exchange for product feedback and roadmap input.

Key features

• DNS filtering via REST API (57 endpoints) and MCP server (54 tools) instead of a dashboard
• Inline DGA classifier and typosquat detector with Cyrillic homoglyph normalization
• DoH, DoT, and DoQ resolvers with per-device DoH URLs
• HMAC-SHA256 signed webhooks with wildcard event subscriptions for policy and threat events
• Scoped API keys and JWT auth with 16 scopes, per-key expiry, and audit logging of every mutation
• Aggregates 67 community blocklists across 14-15 categories with per-tenant subscriptions

Frequently asked questions