SecureDNS Agent vs NoirShield

SecureDNS Agent protects your device by encrypting all DNS queries through your organization's Secutec-managed secure DNS infrastructure. Once registered with your company key, every DNS lookup on your device is routed through an encrypted DNS-over-HTTPS (DoH) tunnel preventing interception, manipulation, or surveillance of your browsing activity. FEATURES • DNS-over-HTTPS enforcement — All DNS traffic is encrypted in transit, preventing network-level eavesdropping • Policy-based filtering — Malicious domains, phishing sites, and unwanted content are blocked according to your organization's policy • DNS query log — See every DNS query made on your device, with filtering status (Resolved, Blocked, Filtered) • Automatic failover — Built-in fallback resolver chain keeps you protected even if the primary server is unavailable • Protection dashboard — At-a-glance status: Protected, Connecting, Passthrough, or Disconnected • MDM-managed deployment — IT administrators can deploy and configure via Mobile Device Management without user interaction • Passthrough mode — Automatically handles captive portals (hotel/airport Wi-Fi) without blocking connectivity • Dark & Light mode — Follows system appearance settings • Multi-language support

NoirShield is a network tool that runs entirely on your device. It encrypts your DNS lookups and can match them against blocklists stored on the device. Your traffic is never routed through a server of ours: there is nothing to relay it through, and your IP address does not change. ENCRYPTED DNS Resolve names over DNS-over-HTTPS or DNS-over-TLS. Choose from built-in encrypted resolvers or enter your own custom endpoint. Measure them on the network you are on and switch to the fastest. ON-DEVICE FILTERING Optional lists for ads and trackers, malware, phishing and crypto mining — 470,943 domains, matched on the device. Every list is off until you turn it on. You can import your own list and add your own allow and block rules, which take priority. DIAGNOSTICS Fourteen checks: reachability, IPv4 and IPv6, captive portals, latency, DNS resolution, DNS interception, DoH, DoT, HTTPS, TLS, QUIC, WebSocket and UDP. AUTOFIX Measures the network, applies a compatibility profile, verifies the result and remembers what worked for that network. NO ACCOUNT No sign-up, no sign-in, no subscription. Nothing about your lookups is uploaded. The activity log stays in memory and is gone when the app closes, unless you switch on "Keep activity after restart" in Settings. The app reaches our server for two things only: signed blocklist updates, and the connection tests while you are running diagnostics. NoirShield is not a country-switching VPN. It has no relay or proxy server, does not change your IP address and never decrypts HTTPS. On iPhone and iPad, iOS shows its own VPN badge whenever an on-device tunnel is running; NoirShield uses that tunnel only to hand DNS queries to the resolver on your device.