DNS Sinkhole vs SecureDNS Agent

Choose encrypted DNS without replacing your VPN. Sinkhole helps you understand, select, and configure a trusted DNS-over-HTTPS provider on iPhone and iPad. It adds an encrypted DNS configuration for the provider you choose, using the system API iOS provides for this. SIMPLE GUIDED SETUP Choose your goal — privacy and security, family protection, or advanced custom DNS — then follow clear installation steps designed for everyone. CURATED PROVIDERS Compare privacy and security-focused options from established public DNS providers. Depending on your selection, provider-side filtering may cover known malware, phishing, trackers, ads, or adult content. ADVANCED MODE Use a trusted custom HTTPS DNS endpoint from a service you control or configure, including compatible self-hosted resolvers. HONEST STATUS Sinkhole reads its own state from iOS: whether a configuration exists, and whether iOS has it active. It also sends a single DNS test request to confirm the selected endpoint is reachable, and keeps that separate from activation. PRIVACY BY DESIGN • No Sinkhole account • No LorisLabs DNS server • No VPN tunnel and no VPN configuration • No advertising or analytics SDK • No DNS query or browsing history received by Sinkhole Once active, DNS requests go directly from your device to the provider you selected. That provider's privacy policy and filtering behavior apply. Sinkhole cannot see or fabricate per-domain statistics. IMPORTANT iOS asks for your approval before Sinkhole can add a DNS configuration, and only you can select it in Settings > General > VPN & Device Management > DNS. You can switch away or remove it there at any time, without the app. A VPN may choose to override system DNS settings; behavior depends on that VPN.

SecureDNS Agent protects your device by encrypting all DNS queries through your organization's Secutec-managed secure DNS infrastructure. Once registered with your company key, every DNS lookup on your device is routed through an encrypted DNS-over-HTTPS (DoH) tunnel preventing interception, manipulation, or surveillance of your browsing activity. FEATURES • DNS-over-HTTPS enforcement — All DNS traffic is encrypted in transit, preventing network-level eavesdropping • Policy-based filtering — Malicious domains, phishing sites, and unwanted content are blocked according to your organization's policy • DNS query log — See every DNS query made on your device, with filtering status (Resolved, Blocked, Filtered) • Automatic failover — Built-in fallback resolver chain keeps you protected even if the primary server is unavailable • Protection dashboard — At-a-glance status: Protected, Connecting, Passthrough, or Disconnected • MDM-managed deployment — IT administrators can deploy and configure via Mobile Device Management without user interaction • Passthrough mode — Automatically handles captive portals (hotel/airport Wi-Fi) without blocking connectivity • Dark & Light mode — Follows system appearance settings • Multi-language support