Sold by: ThreatBook Co., LTD.
Cloud-based DNS Secure Web Gateway powered by threat intelligence. Blocks ransomware, phishing, C2, and malicious mining at the DNS layer for office networks, branches, and roaming endpoints.
Overview
ThreatBook OneDNS is a cloud-based, DNS-layer Secure Web Gateway that fuses global threat intelligence with high-performance recursive DNS resolution. Deployed as a SaaS service in minutes, OneDNS protects office networks, branch offices, and roaming endpoints against ransomware, phishing, APT C2 callbacks, malicious mining, trojans, and non-compliant content, all at the DNS layer, before a connection is ever established.
KEY CAPABILITIES Advanced threat intelligence: ThreatBook CTI cloud is updated in minutes with a detection accuracy of 99.9 percent, blocking newly emerging threats including ransomware, APT C2, phishing, and mining malware.
Stable and fast DNS resolution: 99.999 percent service availability backed by a distributed anycast architecture with automatic load balancing and node-level fault self-healing.
Centralized multi-tenant management: One administrator account manages headquarters, sub-organizations, branches, and remote roaming devices with hierarchical policies.
Granular policy control: Content category filtering, custom domain block and allow lists, DNS tunnel interception, and compromised-host localization with endpoint process forensics.
Visualization and reporting: Real-time dashboards, DNS log search, IM and email alerting, scheduled security reports, and open API access.
WHY ONEDNS ThreatBook is a leading threat intelligence vendor in Greater China by market share and a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years. ThreatBook is also recognized in the 2025 Gartner Magic Quadrant for Network Detection and Response. OneDNS has protected office networks for 5,000 plus enterprises including major banks, securities firms, energy and manufacturing companies for over a decade.
DEPLOYMENT SaaS. No hardware, no on-premises agents required for network-based protection. A lightweight optional client is available for roaming endpoint coverage. Activation is completed by the ThreatBook team within one business day of subscription via AWS Marketplace.
Highlights
- 99.999 percent DNS resolution availability backed by a global anycast network with automatic load balancing and node-level fault self-healing.
- Powered by ThreatBook threat intelligence, a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years.
- SaaS deployment in minutes with no hardware or agents. One console centrally manages headquarters, branches, and roaming endpoints from a single account.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
OneDNS - up to 1,000 endpoints | Annual subscription tier for deployments with up to 1,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $34.00 |
OneDNS - 1,001 to 3,000 endpoints | Annual subscription tier for deployments with 1,001 to 3,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $24.00 |
OneDNS - 3,001 to 5,000 endpoints | Annual subscription tier for deployments with 3,001 to 5,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $15.00 |
OneDNS - 5,001 to 10,000 endpoints | Annual subscription tier for deployments with 5,001 to 10,000 office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. | $9.50 |
OneDNS - 10,001 endpoints and above | Annual subscription tier for large enterprise deployments with 10,001 or more office endpoints. Includes all OneDNS features: threat intelligence based DNS filtering, centralized SaaS console, multi-tenant management, content category filtering, DNS log search, IM and email alerting, and open API access. Activation within 1 business day. Custom enterprise SLA and 24x7 support available via Private Offer. | $4.50 |
Dimensions summary
You buy OneDNS as an annual subscription priced by the number of office endpoints you protect. Five tiers scale with your deployment size: up to 1,000 endpoints, 1,001 to 3,000, 3,001 to 5,000, 5,001 to 10,000, and 10,001 or more. You pick the tier that matches your endpoint count. Every tier includes the same features, so pricing changes with scale rather than capability. The largest tier, for 10,001 endpoints and above, adds a custom enterprise SLA and 24x7 support through a Private Offer. Each tier activates within one business day.
Top-of-mind questions for buyers
An endpoint is any office device sending DNS queries through OneDNS. This includes headquarters computers, branch office devices, and roaming laptops connecting from home. Each device counts as one endpoint. You pick the tier that matches your total protected device count across all locations.
Tiers are set by endpoint bands, such as up to 1,000 or 1,001 to 3,000. If your device count crosses a band, you move to the tier covering the new range. All features stay the same across tiers, so only your billing band changes as you scale.
No. OneDNS is a SaaS service. You change your DNS resolver to activate it, with no hardware to buy and no agents to install. Your subscription covers cloud-based DNS filtering, the management console, and threat intelligence updates. There are no separate installation or maintenance costs.
threatbook.io
Helpful?
Vendor refund policy
Refund policy: All sales are final. ThreatBook does not provide refunds for subscription fees paid through AWS Marketplace, except as required by applicable law or expressly agreed in a Private Offer. Customers may cancel future renewals through the AWS Marketplace console. For refund requests, contact ThreatBook Support at contactus@threatbook.io . Response within 1 business day, Hong Kong time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
OneDNS support is provided by ThreatBook
Contact: contactus@threatbook.io
Business hours: Monday through Friday, 09:00 to 18:00 UTC+8
Response SLA: within 1 business day for standard subscriptions. Enterprise 24x7 SLA available via Private Offer.
Account provisioning: ThreatBook will provision your OneDNS tenant within one business day of subscription. Credentials will be sent to the email address associated with your AWS account.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
ThreatBook intelligence API relies on the powerful data collection capabilities of the ThreatBook Security Cloud, combined with independently developed core intelligence production systems, including dozens of different extraction methods, to quickly and automatically produce high-coverage, high-fidelity, and context-rich intelligence data.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.