fitgap

Whalebone

DNS security solutions
Secure web gateways
Network security software
Web security software
Features
Ease of use
Ease of management
Quality of support
Affordability
Market presence
Take the quiz to check if Whalebone and its alternatives fit your requirements.
Pricing from
Contact the product provider
Free Trial
Free version unavailable
User corporate size
Small
Medium
Large
User industry
-

What is Whalebone

Whalebone is a DNS-layer security platform that detects and blocks access to malicious domains (for example, phishing, malware, and command-and-control) using recursive DNS protection. It is commonly deployed by internet service providers, managed service providers, and enterprises to protect end users and networks without requiring endpoint agents. The product typically integrates with existing DNS infrastructure and provides centralized policy management, reporting, and threat intelligence-driven filtering.

pros

DNS-layer threat prevention

Whalebone blocks malicious destinations at the DNS resolution stage, which can reduce exposure to phishing and malware before a connection is established. This approach can protect a broad set of devices, including unmanaged and IoT endpoints, because it does not rely on client software. DNS-layer controls also remain effective across many applications that still depend on DNS lookups.

Fits ISP and MSP deployments

The platform is designed for multi-tenant and large-scale environments where many customer networks or subscriber groups must be managed centrally. Policy controls and reporting can be applied per customer, site, or user group depending on deployment model. This aligns with operational needs typical of service providers that deliver security as an add-on service.

Integrates with existing DNS

Whalebone can be deployed alongside existing recursive DNS services and network security tooling rather than requiring a full replacement of DNS infrastructure. This can simplify rollout compared with solutions that bundle DNS with broader DDI stacks. Centralized dashboards and APIs support operational workflows such as monitoring, alerting, and incident triage.

cons

Limited beyond DNS visibility

DNS security cannot inspect full URLs, page content, or encrypted traffic payloads, so it may miss threats that do not rely on domain lookups or that use benign domains. Use cases such as granular web access control and content inspection typically require additional web security controls. Organizations may need to pair DNS-layer protection with other network and endpoint defenses.

Potential false positives and tuning

Domain-based blocking can disrupt legitimate services when domains are misclassified or when shared hosting/CDNs serve mixed content. Effective operation often requires allowlisting, category tuning, and exception handling for business-critical applications. Ongoing review of detections and policy adjustments is usually necessary to balance security and usability.

Dependency on DNS traffic routing

To be effective, client devices must consistently use the protected recursive DNS path; bypass via hardcoded resolvers, DoH/DoT configurations, or roaming scenarios can reduce coverage unless explicitly controlled. Some environments require additional network enforcement to prevent resolver bypass. Deployment complexity can increase when multiple DNS resolvers, split-horizon DNS, or hybrid networks are involved.

Plan & Pricing

Pricing model: Quote-based / annual subscription (no public list prices). Details per product (official Whalebone website):

  • Whalebone Immunity: Yearly subscription priced by number of applicable users; all features included in the subscription; official site instructs to "Get a quote" and to contact immunity@whalebone.io. No public per-user or per-seat prices published.

  • Whalebone Aura (Telco product): Flexible/commercial models (volume-based, bulk pricing, or revenue-share). Pricing is tailored and Whalebone asks telcos to request indicative pricing or book a call. No public list prices published.

  • Whalebone Peacemaker (ISP resolver): Pricing is not listed publicly on the product page; Whalebone offers a free trial/proof-of-concept and requests contact (peacemaker@whalebone.io) for pricing.

Notes: The Whalebone site contains customer/case-study posts that show end-customer retail prices set by telco partners (examples: ~0.68 EUR/month in partner consumer offerings), but these are partner-set retail prices and not published Whalebone list prices for enterprise/ISP procurement.

Seller details

Whalebone, s.r.o.
Brno, Czech Republic
2016
Private
https://www.whalebone.io/
https://x.com/whalebone
https://www.linkedin.com/company/whalebone/

Tools by Whalebone, s.r.o.

Whalebone
›

Popular categories

Generative AI & LLM

Agents, autonomous & workflow automation

Vertical AI

Sales

Marketing

Security

Analytics

Collaboration & productivity

Commerce

Content management

Customer service

Development

ERP

HR

IT infrastructure

IT management

Generative AI & LLM

Agents, autonomous & workflow automation

Vertical AI

Sales

Marketing

Security

Analytics

Collaboration & productivity

Commerce

Content management

Customer service

Development

ERP

HR

IT infrastructure

IT management

All categories