Overview
ThreatBook OneDNS is a cloud-based, DNS-layer Secure Web Gateway that fuses global threat intelligence with high-performance recursive DNS resolution. Deployed as a SaaS service in minutes, OneDNS protects office networks, branch offices, and roaming endpoints against ransomware, phishing, APT C2 callbacks, malicious mining, trojans, and non-compliant content, all at the DNS layer, before a connection is ever established.
KEY CAPABILITIES Advanced threat intelligence: ThreatBook CTI cloud is updated in minutes with a detection accuracy of 99.9 percent, blocking newly emerging threats including ransomware, APT C2, phishing, and mining malware.
Stable and fast DNS resolution: 99.999 percent service availability backed by a distributed anycast architecture with automatic load balancing and node-level fault self-healing.
Centralized multi-tenant management: One administrator account manages headquarters, sub-organizations, branches, and remote roaming devices with hierarchical policies.
Granular policy control: Content category filtering, custom domain block and allow lists, DNS tunnel interception, and compromised-host localization with endpoint process forensics.
Visualization and reporting: Real-time dashboards, DNS log search, IM and email alerting, scheduled security reports, and open API access.
WHY ONEDNS ThreatBook is a leading threat intelligence vendor in Greater China by market share and a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years. ThreatBook is also recognized in the 2025 Gartner Magic Quadrant for Network Detection and Response. OneDNS has protected office networks for 5,000 plus enterprises including major banks, securities firms, energy and manufacturing companies for over a decade.
DEPLOYMENT SaaS. No hardware, no on-premises agents required for network-based protection. A lightweight optional client is available for roaming endpoint coverage. Activation is completed by the ThreatBook team within one business day of subscription via AWS Marketplace.
Highlights
- 99.999 percent DNS resolution availability backed by a global anycast network with automatic load balancing and node-level fault self-healing.
- Powered by ThreatBook threat intelligence, a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years.
- SaaS deployment in minutes with no hardware or agents. One console centrally manages headquarters, branches, and roaming endpoints from a single account.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
OneDNS - up to 1,000 endpoints | Annual subscription tier for deployments with up to 1,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $34.00 |
OneDNS - 1,001 to 3,000 endpoints | Annual subscription tier for deployments with 1,001 to 3,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $24.00 |
OneDNS - 3,001 to 5,000 endpoints | Annual subscription tier for deployments with 3,001 to 5,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $15.00 |
OneDNS - 5,001 to 10,000 endpoints | Annual subscription tier for deployments with 5,001 to 10,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $9.50 |
OneDNS - 10,001 endpoints and above | Annual subscription tier for large enterprise deployments with 10,001 or more office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. Custom enterprise SLA and 24x7 support available via Private Offer. | $4.50 |
Vendor refund policy
Refund policy: All sales are final. ThreatBook does not provide refunds for subscription fees paid through AWS Marketplace, except as required by applicable law or expressly agreed in a Private Offer. Customers may cancel future renewals through the AWS Marketplace console. For refund requests, contact ThreatBook Support at contactus@threatbook.io . Response within 1 business day, Hong Kong time.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
OneDNS support is provided by ThreatBook
Contact: contactus@threatbook.io
Business hours: Monday through Friday, 09:00 to 18:00 UTC+8
Response SLA: within 1 business day for standard subscriptions. Enterprise 24x7 SLA available via Private Offer.
Account provisioning: ThreatBook will provision your OneDNS tenant within one business day of subscription. Credentials will be sent to the email address associated with your AWS account.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.