PAGES
← all tools
◆ Secure Access (VPN / SASE / ZTNA)

ScoutDNS

Insights tables keep their headers and show when they're loading commercial

ScoutDNS is a DNS filtering and threat protection service for businesses, MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs., schools, and nonprofits that blocks unwanted content and malicious domains.

Summary

ScoutDNS is a commercial DNS filtering service run as cloud-based secure access infrastructure, letting organizations enforce allow/block policies without hosting anything themselves. Policies can be built from custom lists with per-entry match or subtree scope, wildcard entries covering a domain and its subdomains, and comments documenting why a rule exists, while Zero Trust TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. filtering can auto-generate an allowlist from 30 days of real query traffic and each policy gets a 0–100 Secure Score with a breakdown of what to fix. A Deployments view maps every policy assignment across sites, profiles, and personas, sites report health from WAN and relay state rather than query volume, and an MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. dashboard gives a cross-tenant view for managed accounts, which points this squarely at MSPs and IT teams managing DNS security across multiple sites or clients rather than at individual administrators.

ScoutDNS is a DNS filtering and threat protection service for businesses, MSPs, schools, and nonprofits that blocks unwanted content and malicious domains.

How ScoutDNS helps

Which sites or client accounts have a policy gap right now?

the Deployments view lists every policy assignment across sites, profiles, and personas in one account-wide table, so a site running the wrong or no policy is visible without opening each one individually

How strong is a given policy actually configured to be?

each policy carries a 0–100 Secure Score with a per-item breakdown of what to enable to raise it, turning a vague sense of exposure into a specific list of settings to fix

Which of my sites are down right now, and is it the network or the DNS relay?

site health is reported as stateful up/down state derived from WAN and relay status rather than inferred from query volume, so a quiet site is not confused with an offline one

Which domains should a Zero Trust allowlist actually include for this organization?

the TLD filter can build the allowlist automatically from 30 days of that organization's real query traffic instead of starting from a guessed list

Why was this domain ever allowed or blocked?

a comment can be attached to any list entry at the time it is created, so the reasoning is visible later instead of being lost to whoever wrote the rule

Does a rule cover just this one host or its whole domain?

each custom list entry is explicitly scoped as match or subtree, and a wildcard entry now covers the domain and all its subdomains in one line, so the reach of a rule is stated rather than assumed

all 9 features, with the evidence for each →

Languages

Not documented

Features

9 capabilities

Built from ScoutDNS's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What ScoutDNS offers you

  • Multi-tenant management1
  • Web management console1
All capabilities 9 capabilities
Insights query log viewer shipped An interactive log viewer for DNS query insights that supports sorting, paginated log loading with retry on failure, empty and error states, and a reset control that returns to the default view while preserving browser navigation history. 9 releases · 3 other sources · first seen Oct 2026

release 9 total

  • Displays "No results for this view." and "This view didn't load." status messages Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history
  • Displays 'No results for this view.' when a table is empty and 'This view didn't load.' with a Refresh prompt on query failure. Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history
  • Adds a Reset view button in the Insights toolbar that returns to the Domain tab with Last Hour, 50 rows, and no filters or search; Browser Back restores the previous view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history
  • Adds Refresh and Retry action labels for failed loads Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history
  • Adds a Retry button when a page of logs fails to load, pausing further log loading until clicked. Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history
  • Sorting an Insights table no longer triggers a full table reload. Insights tables keep their headers and show when they're loading · Oct 2026 · source · release history

example

  • Return Insights to its default state after drilling into filtered results, without losing the ability to go back via the browser. In Insights, click Reset view in the toolbar to return to the Domain tab with Last Hour, 50 rows, and no filters or search. To undo, click Browser Back. Insights tables keep their headers and show when they're loading · Oct 2026 · source
  • Retry a failed page load of logs after a network glitch or transient server error. Click `Retry` on the failed page notification Insights tables keep their headers and show when they're loading · Oct 2026 · source
  • Quickly clear all active filters and return to the default Domain view without closing the Insights panel. Click `Reset view` in the toolbar Insights tables keep their headers and show when they're loading · Oct 2026 · source
DNS allow/block list management shipped Custom allow and block lists support per-entry match scope (single hostname or full subtree), inline comments to record the reason for each rule, and a wildcard format that covers both a domain and its subdomains in one entry. 7 releases · first seen Jun 2026

release 7 total

  • Single wildcard entry now covers both the domain itself and all subdomains, eliminating the need for two separate entries. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • New per-entry match or subtree option on every custom allow/block list rule makes it explicit whether a rule covers one hostname or a domain and all subdomains. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Supports wildcards covering both sides of the dot for domain and subdomains The all-new ScoutDNS console is live · Aug 2026 · source · release history
  • Comments can be added to any allow or block list entry to preserve the reason a rule was created. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Adds comments field to allow and block list entries The all-new ScoutDNS console is live · Aug 2026 · source · release history
  • Adds match or subtree option to every entry in custom allow / block lists The all-new ScoutDNS console is live · Aug 2026 · source · release history
Local Forwarder and Split-DNS routing shipped Routes DNS queries for specific namespaces through active VPN tunnels or adapter-resolved private resolvers, including automatic fallback for undeclared private suffixes. 4 releases · 1 other source · first seen Jun 2026

release

  • Adds a private-name fallback so queries for suffixes like .local, .corp, or .internal not covered by any Local Forwarder rule are forwarded to the adapter's private resolvers instead of returning SERVFAIL, enabling AD-joined devices to resolve domain controllers and internal hosts without a profile change. Windows Client 2.2.9 adds a fallback for undeclared private names · Sep 2026 · source · release history
  • Adds automatic fallback to private resolvers for undeclared private names (.local, .corp, .internal) when no NRPT rule covers the name Windows Client 2.2.9 adds a fallback for undeclared private names · Sep 2026 · source · release history
  • Validated in both split tunnel (GSA Private Access) and full tunnel modes. Windows Client 2.2.6 adds Microsoft Entra Global Secure Access compatibility · Sep 2026 · source · release history
  • Adds adapter-aware resolver selection to Local Forwarders, allowing the client to use tunnel-provided DNS from VPN or ZTNA tools for configured internal namespaces Windows Client (v2) beta adds adapter-aware local forwarding · Jun 2026 · source · release history

example

  • Configure split-DNS so that specific internal namespaces resolve through the active VPN tunnel's DNS instead of a static address. In the Windows Client (v2) Local Forwarders settings, configure 'adapter-aware resolver selection' for your internal namespaces. Windows Client (v2) beta adds adapter-aware local forwarding · Jun 2026 · source
Policy management shipped Policies can be created and assigned across sites, profiles, and personas, with an account-wide Deployments view for inline editing of all assignments and a 0–100 Secure Score showing per-item guidance for improving policy posture. 4 releases · 1 other source · first seen Aug 2026

release

  • Adds Deployments subtab on Policies page showing account-wide roll-up of assignments The all-new ScoutDNS console is live · Aug 2026 · source · release history
  • Each policy now carries a 0–100 Secure Score with a per-item breakdown showing what to enable to raise it. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Adds Secure Score (0-100) with breakdown to every policy The all-new ScoutDNS console is live · Aug 2026 · source · release history
  • New Deployments subtab on the Policies page shows every policy assignment across sites, profiles, and personas in one account-wide view with inline editing. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history

example

  • Review the account-wide deployment status of all policies across sites and personas. Open Policies > Deployments subtab to see every policy assignment in one list. The all-new ScoutDNS console is live · Aug 2026 · source
Microsoft Entra GSA Private Access integration shipped Automatically detects and coexists with Microsoft Entra Global Secure Access tunnels, permitting required bootstrap paths while enforcing public DNS policy without manual exclusions. 4 releases · first seen Sep 2026

release

  • Introduces support for GSA Internet Access by requiring ScoutDNS Block Page IPs in GSA Custom Bypass to prevent cloud proxy conflicts Windows Client 2.2.6 adds Microsoft Entra Global Secure Access compatibility · Sep 2026 · source · release history
  • Adds compatibility with Microsoft Entra Global Secure Access (GSA) in Windows Client 2.2.6 (driver 1.0.0.22), allowing ScoutDNS and Entra Private Access to coexist without disrupting private DNS or tunnel startup. Windows Client 2.2.6 adds Microsoft Entra Global Secure Access compatibility · Sep 2026 · source · release history
  • Adds automatic detection and policy adjustment for Microsoft Entra Global Secure Access (GSA) Private Access tunnels in Windows Client 2.2.6 Windows Client 2.2.6 adds Microsoft Entra Global Secure Access compatibility · Sep 2026 · source · release history
  • Automatically detects an active GSA Private Access tunnel and permits only required GSA bootstrap and synthetic DNS paths while continuing to enforce ScoutDNS policy for public DNS — no manual domain or IP exclusions required. Windows Client 2.2.6 adds Microsoft Entra Global Secure Access compatibility · Sep 2026 · source · release history
Zero Trust TLD filtering shipped Filters DNS queries by top-level domain, with the ability to auto-generate a TLD allowlist derived from the last 30 days of real query traffic for an organization. 2 releases · 1 other source · first seen Aug 2026

release

  • Zero Trust TLD filtering can now auto-generate a TLD allowlist from the last 30 days of real query traffic for any organization. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Enables TLD list generation from last 30 days of real usage for Zero Trust filtering The all-new ScoutDNS console is live · Aug 2026 · source · release history

example

  • Generate a trusted TLD baseline from recent traffic to simplify Zero Trust configuration. Navigate to Zero Trust settings and select 'Generate TLD list' for your organization. The all-new ScoutDNS console is live · Aug 2026 · source
MSP multi-tenant management shipped A dedicated MSP dashboard under the Organizations tab provides a cross-tenant view of all managed accounts in one place. 2 releases · first seen Aug 2026

Also counts toward: Multi-tenant management, Web management console

release

  • New MSP dashboard under the Organizations tab gives a cross-tenant view of all managed accounts. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Adds MSP dashboard under Organizations tab for cross-tenant view The all-new ScoutDNS console is live · Aug 2026 · source · release history
Site health monitoring shipped Sites report stateful up/down health status based on the condition of WANs and relays rather than recent query volume. 2 releases · first seen Aug 2026

release

  • Sites now report stateful up/down health based on WANs and relays rather than recent query volume. The all-new ScoutDNS console is live · seen Aug 2026 · source · release history
  • Reports stateful site health based on WANs and relays The all-new ScoutDNS console is live · Aug 2026 · source · release history
UI Dark Mode shipped Provides a toggle to switch the console interface between light and dark themes for user comfort. 1 release · 1 other source · first seen Aug 2026

release

  • Adds dark mode toggle in the console header The all-new ScoutDNS console is live · Aug 2026 · source · release history

example

  • Toggle dark mode to reduce eye strain during long monitoring sessions. In the console header, click the theme selector and choose 'Dark'. The all-new ScoutDNS console is live · Aug 2026 · source

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for ScoutDNS, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail ScoutDNS puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

6 entries

  1. October 20261
  2. September 20262
  3. August 20261
  4. June 20262

    6 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →