A cloud security service that acts as the DNS resolver for the devices and networks pointed at it, evaluating every domain lookup against policy and threat intelligence before returning an answer. Requests for malicious or disallowed destinations are answered with a block instead of the real address, stopping the connection before it is established. It additionally offers proxied inspection of risky web traffic and reporting on the DNS activity it observes.