Twingate Internet Security
Proactively block threats
with DNS Filtering
and Content Filtering
Security for everyone, everywhere. From the office, to the coffee shop, to the airport: protect all of your internet traffic in any environment.
rutorrentz.net
rutorrentz.net
Status
Blocked
Condition
Piracy
sportbet360.com
sportbet360.com
Status
Blocked
Condition
Gambling
gamezone.com
github.com
news.google.com
linkedin.com
DNS · INTERNET SECURITY
What is Twingate Internet Security?
Twingate Internet Security is a DNS and content filtering solution that protects internet traffic on every device, across every environment, whether that's the office, a home network, or public Wi-Fi. It inspects DNS queries in real time, catching phishing attempts, malware, cryptojacking, and access to high-risk content before a connection is ever established.
Deployment happens through your existing MDM, so there's no need to introduce new agents or workflows. Policy applies network-wide without backhauling traffic through a central location, keeping performance fast for users while keeping security consistent everywhere they work. Every DNS query gets logged, giving your team full visibility into device activity, browsing patterns, and the specific reasons behind each blocked request.
Traditional secure web gateways operate as a separate layer, bolted onto your existing security stack. Twingate Internet Security instead runs as part of the broader Zero Trust platform, meaning the identity- and device-aware controls that already govern access to private resources extend naturally to govern internet access too. Teams get a single, unified policy layer that covers both private and public traffic, deployable in minutes rather than weeks.
Programatic protection
Deploy and manage via MDM to build internet security into your existing workflows without adding to admin overhead.
Universal internet security
Keep your users protected from threats and human error with comprehensive protection for internet traffic in any environment.
Threat analysis
Discover vulnerabilities and identify trends in internet traffic with query and activity data across your entire network.
Twingate evaluates every DNS request against continuously updated threat intelligence, then encrypts it with DNS-over-HTTPS to your resolver of choice. Malware, phishing, and command-and-control domains are dropped at lookup time. No proxy hop, no separate agent.
Threat protection, on by default
Malware, phishing, command-and-control, cryptomining, DNS tunneling, and newly registered domains are blocked from day one.
Encrypted DNS everywhere
Every query is wrapped in DNS-over-HTTPS so the local network — hotel, café, airport — sees only opaque TLS.
Custom allow / block lists
Layer organization-specific domains on top of the built-in feeds. Changes apply instantly to every enrolled client.
Acceptable-use policy, without acceptable-use pain.
Restrict entire categories of the internet like gambling, adult, piracy, streaming, social media, and unauthorized SaaS. Apply policies per group or org-wide. Same client, same policy plane as DNS filtering and ZTNA.
Policy Content Categories
apply_to = group: standard_users
Social Media
Streaming & Video
Gambling
Adult Content
Piracy
Shopping
Unauthorized SaaS
Custom allow-list
Custom block-list
Dozens of categories
Social, streaming, gambling, adult, piracy, weapons, shopping, dating, games, ads, and trackers. Toggle each one on or off.
Group-scoped policies
Bind filtering profiles to identity-provider groups. Engineering, Finance, K–12 students, or contractors each get the right policy.
Built for regulated environments
Schools, healthcare, financial services, and shared devices meet acceptable-use requirements at the OS level, on and off the network.
Shadow AI
What AI tools are your employees actually using?
Discover AI services across protected devices, understand usage patterns, and attribute activity to the users and devices behind each request.
Coming soon
A
Autoco
autoco.twingate.com
21
TOOLS DETECTED
1.8M
AI REQUESTS
Every detected AI service ranked by observed adoption and tagged by category: assistant, coding, notetaker, writing, developer platform, media, and more.
01 ChatGPT
Assistant
02 Github Copilot
Coding
03 Granola
Notetaker
Devices, requests, and days-active per tool. Coverage shown against total requests and total devices in the org.
SIEM and CSV export with per-user and per-device breakdowns. Share with Security, Finance, or bring into existing workflows.
One policy. Every device. Every network.
No more challenging deployments, poor performance, and constant user complaints. Protect all your users' internet traffic without slowing down the pace of business.
Frequently Asked Questions
What is Twingate Internet Security?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
What is DNS filtering and how does it work?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
What threats does Twingate Internet Security protect against?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
What kind of content can Twingate block besides security threats?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
How do I configure DNS filtering policies for different teams?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Which devices and operating systems support Twingate DNS filtering?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
How is DNS filtering different from a traditional firewall or secure web gateway?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Does Twingate Internet Security protect remote and hybrid employees outside the office?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
How does DNS filtering integrate with Twingate's Zero Trust access model?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Can employees bypass or disable Twingate's DNS filtering?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
What visibility and reporting does Twingate Internet Security provide?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Do I need new hardware or to reconfigure my network to use Twingate DNS filtering?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Which Twingate plans include DNS filtering?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
Can Twingate DNS filtering stop phishing and cryptojacking specifically?
Twingate can be set up in 15 minutes or less. Resources on networks can be secured with our one-line Docker deployment in minutes.
For organizations that need comprehensive security and access controls, plus detailed auditing
No limits on users, admins, or remote networks
Enhanced API & Labs capabilities
Invoicing
SLAs & custom MSAs
Priority support & customer success