– Admins can now manage user-submitted unblock requests directly from the dashboard. The new Unblock Requests page provides a full request queue with tools to Allow or Deny submissions, threat-category warnings on risky domains, an Investigate Mode row action for quick Query Log scoping, and CSV export of active and historical requests.

– The Whitelabel settings page has been redesigned as a dedicated Branding page, with Logo, Favicon, Dashboard Name, and Subdomain URL now managed as individual, first-class branding objects. Net-new MSPs onboarded after September 15 configure a branded subdomain (yourdomain.dnsfilter.com) and are set up with current branding defaults without legacy Whitelabel configuration.

– In-app copy in the Local Domains and Resolvers section now clearly notes that Local Domains and Resolvers only apply in Classic DNS Filtering Mode — Roaming Clients configured in Custom or PreCheck mode do not require local domain configuration.

– Read-only and policy-only users now see the Roaming Client installer as disabled with a clear tooltip explaining that elevated permissions are required, rather than having full access to the installer download.

– Resolved an issue where the Roaming Clients Protected and Relays widgets on organization-level dashboards did not update when filtering by Site.

– Resolved an issue where an organization filter applied on the MSP-level Custom Dashboard could carry over when navigating into an organization's dashboard, causing it to display filtered data rather than data scoped to that organization. Navigating to any organization dashboard now correctly scopes data to that organization.

Plus general performance and stability improvements across the dashboard.

A new version of the iOS Roaming Client is now available in the App Store and will begin rolling out to devices via Apple auto-updates today.

This release includes improvements to MDM configuration handling and device registration.

– Connect an AI assistant to DNSFilter through the Model Context Protocol and work with your DNS data in natural language. A connected client can query DNS activity and threat data, manage policies and allow/block lists, and automate reports and investigations, without navigating the dashboard. Claude, ChatGPT, and Codex are all supported.

Find it under . Open the DNSFilter MCP Server card, copy the server URL, and follow the MCP Server setup guide to connect your client. Setup is admin-only, and once connected, the assistant sees exactly what the connecting user's permissions allow, nothing more. A connected client stays authorized for seven days before prompting to reconnect.

Available on eligible plans. Check the setup guide for package eligibility.

Plus general performance and stability improvements across the dashboard.

– The legacy Overview page has been retired and Dashboards is now the default landing view for all users. Existing links and bookmarks to the Overview page redirect to Dashboards automatically.

– The dashboard Filters drawer has been simplified and reorganized. Quick Filters and Advanced Filters have been merged into a single Filters experience, with filters now grouped by Source (Organizations, Sites, Roaming Clients/Relays, Users) and Traffic (Result). The time range control remains on the main dashboard view.

– Dashboard widgets showing current deployment counts — Roaming Clients Protected, Sites Protected, Relays, Users, and Collections — now display a pulsating green dot to indicate they reflect live data and are not affected by the dashboard time range filter. Hovering the dot shows a tooltip confirming this.

– Bare TLD entries (e.g. .ru, .xyz) in Allow/Block lists and the Query Log now display as "Top Level Domain" instead of "Uncategorized," making it easier to distinguish intentional TLD-level rules from genuinely uncategorized domains.

– Resolved an issue where the search box on the Top Domains dashboard widget only filtered the domains already loaded on screen, returning "No results" for any domain outside the top 20 even when traffic existed. The search now queries all traffic in the selected time range.

Plus general performance and stability improvements across the dashboard.

Version 3.7.11 of the Windows Roaming Client is now available on the . The latest installer is available in the dashboard under .

DNSFilter's DNS-layer protection already follows users onto any network, but being covered is not the same as being private. On hotel Wi-Fi, in airport lounges, and on the home connections where hybrid work actually happens, the destinations a device reaches stay visible to whoever runs the network — and to the ad networks, location trackers, and data brokers collecting alongside. SecureTransit closes that gap by making privacy a policy the organization enforces, not a choice each user has to remember to switch on.

The Windows agent replaces the right-click tray menu with a full DNSFilter One window, themed to match your system's light or dark mode.

Some networks don't leave DNS alone. Hotel Wi-Fi, captive portals, and ISPs that quietly intercept resolvers can redirect DNS traffic before it ever reaches DNSFilter — and on those networks, blocked domains could resolve anyway, with neither the admin nor the end user aware the gap existed. DNS PreCheck v2 detects that interference and keeps policy enforced regardless of what the local network does with DNS.

– The Categories filter in the Query Log now supports a Does Not Include operator, allowing admins to exclude specific categories from their view during investigations.

– Several usability updates to the dashboard experience: dashboards in the Manage Dashboards view now show Private or Shared visibility status and can be updated directly from the quick actions menu; dashboards are now clickable directly from the grid; and clicking the Total Requests widget now opens Insights with Allowed Requests already toggled on.

– The Relay Manager now defaults the config file installation to a shared system location for Windows deployments rather than the installing user's profile folder, preventing configuration loss when user profiles are removed and reducing manual setup steps in managed and multi-user environments.

– The trial banner now reflects each customer's actual situation. Paid customers finishing their free trial days no longer see an interruption warning, customers with time remaining see a calm reminder, and customers in the final days of an unpaid trial see a clear, honest at-risk message. MSP trial accounts see equivalent messaging tailored to their experience.

– Resolved an issue where the Connection Mode toggle was no longer visible at the organization or MSP level. The toggle is now accessible as expected without requiring per-endpoint configuration.

Plus general performance and stability improvements across the dashboard.

– Query Log filters have been consolidated into a single top-level panel, bringing grid-level filters up to the top filter bar. All filters apply together with a single Apply button, so nothing runs until you're ready and there's no need to set filters across multiple places.

– Several refinements to the dashboard experience: newly added widgets now land in the next available grid slot without overlapping or displacing existing ones; a persistent time range indicator now stays visible while scrolling or switching views; and the destructive "Reset to Default" option has been removed from the Dashboard Actions menu.

– Resolved an issue where the Site dropdown when editing a Roaming Client's assigned Site was limited to 20 results, making additional Sites unreachable for larger accounts. All Sites now appear in the dropdown.

– Resolved an issue where the Overview page's Top Domains widget displayed domains out of order, causing some high-traffic domains to be pushed off the visible list.

– Resolved an issue where CyberSight reports covering a time window that spanned midnight — such as an overnight "last few hours" query — incorrectly returned empty results. These time windows now return data correctly.

Plus general performance and stability improvements across the dashboard.

Version 3.7.11 of the Windows Roaming Client is now available on the . To install, download the latest beta installer from the dashboard under .

DNSFilter's DNS-layer protection already follows users onto any network, but being covered is not the same as being private. On hotel Wi-Fi, in airport lounges, and on the home connections where hybrid work actually happens, the destinations a device reaches stay visible to whoever runs the network — and to the ad networks, location trackers, and data brokers collecting alongside. SecureTransit closes that gap by making privacy a policy the organization enforces, not a choice each user has to remember to switch on.

The Windows agent replaces the right-click tray menu with a full DNSFilter One window, themed to match your system's light or dark mode.

– The Policy/Schedule dropdown now groups your organization's own policies under an "Organization" header, with sections ordered Organization, Global, then Scheduled — making it easier to find the right policy when assigning across Sites, Roaming Clients, Relays, Subnets, Users, and Collections.

– Resolved an issue where DNS Query Log CSV exports were missing user attribution fields when a sub-organization inherited its PII setting from a parent MSP. Exports now correctly include this data.

– Resolved an issue where new trial signups were seeing the license overuse banner before becoming paying customers. The banner now only appears for genuine overuse by existing customers.

– Resolved an issue where self-serve MSP sub-organizations on the Core plan were shown an upsell banner blocking AppAware reporting, despite AppAware being included in the Core plan. AppAware reporting now loads correctly regardless of plan.

Plus general performance and stability improvements across the dashboard.