Everything in DNS Angel, and what it leaves out.
Protection on every school computer, room for teachers to teach, the record leaders need, and a team that runs it for you.
Protection on every school computer
Security-grade filtering on every school Windows computer. Your IT team installs it with scripts from IronSights, and IronSights manages it.
Filters in three places
On each school Windows computer, inside Chrome, Edge and Firefox, and on the school network if you choose.
More than 200 content categories
Adult content, gambling, violence, self-harm, cyberbullying and hate speech are among the categories that can be blocked.
Stops threats as well as content
Known malware, phishing and botnet sites are blocked using continuously updated threat intelligence, and brand-new domains can be blocked too.
Phishing checks in the browser
The browser extension can check sign-in pages for signs of phishing.
AI tools on your terms
AI chat sites can be blocked for students and allowed for staff, or allowed for one lesson with DNS Angel.
Fewer ways around the filter
Encrypted DNS in supported browsers still goes through the filter, and known proxy and VPN services can be blocked.
Protection that travels
School laptops stay filtered at home and on public Wi-Fi.
Rules for people and for computers
Students and staff can have different rules, and a shared computer can keep its own rules whoever signs in.
Private browsing under control
Incognito and InPrivate windows can be switched off on school computers.
Unknown sites handled safely
New or unrated sites can be blocked, or opened read-only so they can be read but not typed into.
Quiet to install and run
Installs in the background through Group Policy, Intune or your device management tool, updates itself, and doesn't decrypt web traffic.
A record when it matters
Blocked sites are logged with the user, computer and time, and IronSights is alerted if the DNS Agent is removed from a computer.
For teachers
Three choices, made from the front of the room.
Allow a site for a lesson
Pick the site, 30, 45 or 60 minutes, and the room or class. That's the whole job.
Lesson sets
Save the sites a unit needs and allow them together in one go.
Starting, Live, Ending
Clear status with a countdown, so a teacher always knows whether it's working yet and when it ends.
End early
Finished early? Press End.
History
What you allowed in the last 30 days, and how each one ended.
Clear answers when it's a no
If a site can't be allowed, the message names the site and the reason.
School sign-in
Microsoft or Google school accounts, on a phone, tablet or laptop. No new passwords.
For school leaders
A plain record you can stand behind.
Activity
Who allowed which site, for which room or class, for how long, and how it ended.
Export
Download the record as a spreadsheet for a review, a complaint or a board report.
One switch to end all access
Stop all access is there for the day something isn't right, and it's recorded too.
Limits that always hold
IronSights' Always blocked list and your Never allow list apply to every teacher, every time.
For your IT team
Control stays with you, and unblock requests stop landing in your queue.
Live access
Everything allowed right now, in every room and class, with End beside each one.
Stop all access
Ends all access and blocks new access until you lift the stop. You type stop to confirm.
Never allow
Your school's own list of sites teachers can never allow, checked when a teacher saves a lesson set and again when they allow a site.
Teacher limits
Per-site settings: whether teachers may allow a site, and for how long.
Rooms and classes
Choose whether access follows a room's computers or a class's students.
Computers
Every computer with the DNS Agent and its room, flagged when one isn't where it should be.
Staff and invitations
Invite staff, and assign teachers to the rooms and classes they teach.
Connection health
See at a glance that filtering is connected and working.
Managed by IronSights
A service, so your IT team gets the controls without the upkeep.
Set up with you
Sign-in, classes and rooms, your normal filter, and the scripts that install the DNS Agent.
Checked every 15 minutes
Filter rules are checked against what they should be. Changed settings are put back, and anything else comes to us.
If access can't end, we hear about it
If access ever fails to end, IronSights is alerted, and it's recorded.
Australian support
Questions go to the team that set your school up.
Security and privacy
Built by a cyber security team that protects schools and colleges, with schools' obligations in mind from the start.
Hosted in Sydney
The DNS Angel app and its records run in Australia.
Each school kept apart
The database itself keeps each school's records apart.
Enterprise sign-in, standard
Microsoft 365 or Google Workspace sign-in for every school, never a paid upgrade. Staff are invited, and DNS Angel stores no passwords.
Every action audited
Comprehensive auditing and logging of teacher and admin activity: every allow, end, stop and settings change, with who did it and when, in a record that can't be edited after the fact.
Designed to WCAG 2.2 AA
Large controls, clear words, and nothing that relies on colour alone.
What it doesn't do, on purpose
DNS Angel controls access. It doesn't watch students, and some things are left out by design.
- Show teachers students' screens
- Score students or flag their wellbeing
- Let a teacher allow anything your school has ruled out
- Leave access running unnoticed after its time is up
Device coverage today: school Windows computers, in Chrome, Edge and Firefox, plus the school network at the DNS level. Talk to us about Macs. Chromebooks and iPads aren't supported.
See every part of it in one walkthrough.
A walkthrough with the IronSights team: how teachers allow a site, what your IT team controls, what leaders can see, and how we set it up for you.