AviontexDNS
Every connection starts with a question to the DNS server: where to? Whoever controls the answer decides where every device goes. AviontexDNS uses this point to protect you. And it is built so that nobody can turn it against you.
The strongest point for protection. And the most rewarding target.
Every connection starts with DNS. That is why more can be stopped there than anywhere else. For the same reason a DNS server is a rewarding target: whoever fools it sends every device wherever they want. A DNS filter that can be fooled turns from protection into danger. Even so, DNS gets little attention in many security concepts.
Protection AviontexDNS offers
It often recognizes attacks while they are still being prepared, uncovers the network behind them and never breaks encryption open.
Our approach ↓Protection AviontexDNS has
Our DNS servers are secured on three levels and never take an answer as true just because it arrived.
Our DNS servers ↓DNS security, thought differently.
Many DNS filters are a list at their core. AviontexDNS is a check. The difference shows in seven places.
Reacts once an attack is already running and known.
Recognizes the preparation of an attack and blocks the infrastructure behind it, sometimes up to four days before it is put to use.
Checks whether a name is on a list of known malicious sites. New attacks get through until someone adds them.
Checks whether a request behaves like an attack. That works even for domains nobody knew yesterday.
Blocks every freshly registered domain across the board or lets it through unchecked.
Sorts every address: good, bad or questionable. Questionable addresses are watched instead of blindly blocked.
Routes traffic through a proxy and breaks encryption open to look inside.
Decides on the name alone. The connection itself stays untouched and encrypted.
Blocks the one domain that stands out.
Follows a suspicious domain to its servers and from there to every other domain on the same servers. One finding becomes a whole network.
A blocked request runs into nothing. Programs wait until they give up.
A stopped request ends at our own endpoint. Nothing hangs and the attacker still stays out of reach.
Fixed rules that someone updates by hand.
Detection learns from false alarms and sharpens its own thresholds.
One domain turns into a whole network.
Attackers use the same servers for many domains. AviontexDNS follows a suspicious domain to its servers and from there to every other domain hosted on them. The infrastructure becomes visible before most of these domains are ever used.
- 1 suspicious domain
- its servers
- every domain on those servers
- their servers
- the network behind it
A domain has a history.
Looking only at the name, you see a news site. Knowing its history, you see an attack. AviontexDNS rates domains by their past, not just by what they show today.
- 2017
The domain fox-news24.com is registered. Its name sounds like a well-known news site. It spreads fake news through social networks.
- 2018
The domain expires. For many filters that is the end of it.
- then
Someone registers it again. At first it only redirects to other sites and looks harmless.
- next
It becomes a command server for ransomware.
- 2020 to 2025
It keeps moving to new servers, at least 20 different addresses. Almost every virus scanner rates these addresses as harmless.
As of: November 2026
The connection never happens.
Every connection on the internet starts with a question: at which address can this destination be reached? AviontexDNS answers that question and checks where it leads.
Set the DNS servers
You enter our resolvers as your DNS servers, centrally for your network. No software is needed on the devices.
Every request is checked
Before a device opens a connection, it asks for the address of the destination. AviontexDNS checks that request in real time.
The attacker stays out of reach
If the domain belongs to an attack, the device never receives the attacker's address. The connection to it never starts.
Protection that breaks nothing open.
No client
Workstations, servers, printers and IoT devices are protected, even devices that cannot run extra software. No rollout and no agents to maintain.
Real-time AI detection
An AI rates newly discovered domains against more than 1,700 criteria and puts critical domains on the blocklists right away. It is fed by our own worldwide sensor network.
Fewer ads and trackers
AviontexDNS also keeps ads and trackers away. That protects your staff's privacy and saves bandwidth.
Servers in Germany
Our resolvers run in certified German data centers. Data sovereignty stays within EU jurisdiction.
Our DNS servers are protected themselves.
A DNS server takes in answers from the internet all day long. Usually an answer counts as true as soon as it arrives. Whoever slips in a forged answer redirects every device that asks for that name afterwards.
Our DNS servers are picosegmented. Origin, checking, storing and serving an answer are separate zones, each with its own gate. An answer only reaches the cache through these gates. Only from there does it reach your devices.
An answer is not true just because it arrived.
| Level | Our DNS servers |
|---|---|
| Micro | The servers are separated from each other in the network. |
| Nano | On each server, the services run separated from each other. |
| Pico | In the code, every crossing is a gate. |
No level replaces another. The network cannot see into the server, the server cannot see into the code.
We see the name, never the content.
AviontexDNS learns which name a device asks for. What then travels over the connection it never sees: no content, no passwords, no files. Encryption of your connections stays fully intact.
Resolution itself needs no logging. When AviontexDNS detects an attack, the hit can be logged, for example to find an infected computer.
One more layer, not a replacement.
AviontexDNS replaces neither your firewall nor your endpoint protection. The firewall controls packets, ports and protocols. Endpoint protection detects malware on the device. AviontexDNS keeps a device from reaching a dangerous destination at all.
Together they form protection in several layers.
Questions about AviontexDNS
What is a DNS security solution?
It blocks requests to known and newly detected phishing and malware domains, so clients and servers never reach harmful destinations. It also stops requests to command-and-control servers that attackers use to steer infected devices.
What makes AviontexDNS different from other DNS filters?
Most DNS filters work with lists of known malicious domains. AviontexDNS also recognizes attacks by how they behave and often while they are still being prepared, even when the domain is not on any list yet. It checks not only the question but also the answer. And it works without a proxy, without breaking open an encrypted connection.
Can I test AviontexDNS first?
Yes. We set up a trial period on request, so you can form your own view before you decide. Just send us an email.
How do I add AviontexDNS to my network?
You change your DNS settings. No additional software is needed. That takes load off your devices and cuts maintenance. If your needs go beyond basic protection, we support you with the rollout.
How long does the rollout take?
In simple or well-structured environments, basic protection is often in place within a few hours. In more complex environments the rollout can take a few days.
What about devices I do not know about?
Because no client is needed, AviontexDNS protects everything in your network that looks up addresses. That includes IoT devices, printers, switches and shadow IT, which other approaches often miss.
Does AviontexDNS protect staff outside the office?
Yes. AviontexDNS secures workplaces regardless of location, including home offices and staff on the road.
Is any data collected that a works council would object to?
AviontexDNS only sees requested domain names, never content. Encryption stays intact. Resolution itself needs no logging. Hits of the attack detection can be logged, meaning signs of phishing, malware or data leaking out. Analyzing how employees browse is not what AviontexDNS is for.
Does AviontexDNS slow down the network?
No. Because ads, trackers and malicious sites are never loaded, traffic tends to go down.
What if malware uses its own DNS server?
That happens. That is why we recommend allowing outgoing DNS connections in your network only to our servers. Then this path leads nowhere as well.
Does AviontexDNS accept encrypted DNS requests?
Yes. Besides classic DNS, our servers also accept requests over DNS over HTTPS and DNS over TLS.
Does AviontexDNS run alongside my other systems?
Yes. AviontexDNS runs smoothly next to firewalls and endpoint protection and fits into existing architectures.
Does AviontexDNS help with NIS2?
AviontexDNS can be one building block of your technical measures. NIS2 places obligations on companies, not on individual products. What counts is your overall concept.
What if I want to stop using AviontexDNS?
You remove our resolvers from your DNS settings and can switch right away. There is no lock-in.