Esc
↑↓ moveEnter openCtrlK anywhere
NEW · Kayanat Shield · DNS Filtering

Block threats before they reach your network.

Malware, phishing, botnets and unwanted content stopped at the DNS level. Works on any connection, any device, with nothing to install. Built for homes, schools, offices and ISP links.

12M+Blocked domains in feed
<5 msResolver latency in Kabul
40+Content categories

Threats blocked today EXAMPLE

1,204Blocked
38Phishing
6Malware C2
Ads & trackers842
Adult content260
Phishing38
Gambling58
Example of the Shield dashboard, per site or per device.
How it works

Every request checked in under 5 ms

When a device asks "where is this site?", the Shield resolver checks the name against 12M+ known-bad domains and your policy before answering. Bad names get a block page, good names get a normal answer.

  • Threat feeds updated hourlyMalware, phishing, botnet command servers, newly-registered domains.
  • Reports you can show the bossWho, what, when, per site or per device. CSV export.
  • Custom block pageYour logo and your message, in Dari, Pashto or English.
Profiles

Pick a profile, or build your own

Each profile is a set of category switches. Schools and offices can set a schedule (e.g. social media off during work hours). Click a profile to see its switches.

FamilyAdult, gambling, violence off · safe search forced · YouTube restricted mode
SchoolFamily + games, chat apps, proxies · schedule 07:00–16:00
OfficeThreats + streaming, torrents, proxies · social media on a schedule
Security onlyMalware, phishing, botnet, newly-registered domains · nothing else touched
Malware & botnets
Phishing & scams
Newly registered domains
Adult content
Gambling
Ads & trackers
Social media
Games
Streaming video
VPN & proxies
Crypto mining
Custom allow / block list
Set-up

Three ways to turn it on

No agent, no appliance. Kayanat internet customers can enable it per link from the portal in one click.

  • 1
    Kayanat customerPortal › My services › Shield › On. The link's resolver changes on our side.
  • 2
    Any routerPoint the router's DNS at the Shield resolvers; every device behind it is protected.
  • 3
    Per deviceDNS-over-HTTPS profile for phones and laptops, follows the user on any Wi-Fi.
# Kayanat Shield resolvers
IPv4 / IPv6  sent with your trial
DoH / DoT   your personal address, sent with your trial

# Dashboard per site and per device · logs kept 30 days · export CSV
Plans

Shield pricing

Home

Shield Home

1 link, up to 20 devices
Free with any Kayanat home plan
  • Family profile
  • Safe search
  • 7-day logs
Turn on
Most popular

Shield Business

Up to 5 sites, 250 devices
1,500 AFN / month
  • All profiles + schedules
  • Custom allow / block lists
  • 30-day logs, CSV export
  • Per-site dashboards
Start trial
Education

Shield School

Per campus, unlimited devices
2,500 AFN / month
  • School profile + bell schedule
  • Class-group policies
  • Reports for the principal
Talk to us
Enterprise / ISP

Shield Network

Whole links, resellers, government
Custom
  • Dedicated resolvers in your POP
  • API + SIEM export
  • Reseller white-label
  • 99.99% resolver SLA
Request a quote