2005 ; 10 years ago 2005 11 01 1 2 headquarters san francisco california key people david ulevitch founder & ceo number of employees 201 500 3 parent cisco 2015 present website opendns.com opendns is a company and service which extends the domain name system dns by adding features such as phishing protection and optional content filtering to traditional recursive dns services . the company hosts a cloud computing security product suite umbrella designed to protect enterprise customers from malware botnets phishing and targeted online attacks . the opendns global network processes an estimated 60 billion dns queries daily from 50 million active users connected to the service through 24 data centers worldwide . 4 previously opendns provided an ad supported service 5 showing relevant ads when we show search results and a paid advertisement free service . a the services are based on closed source . on august 27 2015 cisco acquired opendns for us 635 million in an all cash transaction plus retention based incentives for opendns . 7 8 cisco said that it intended to continue development of opendns with its other cloud based security products and that it would continue its existing services . 9 contents 1 products and services 1.1 dns 1.1.1 name server ip addresses 1.2 dns services for personal home use 1.3 dns services for paid business use 1.4 umbrella 1.4.1 added features 1.4.2 umbrella for msps 2 history 2.1 discontinued advertising 3 competitors 4 reception 5 see also 6 notes 7 references 8 external links products and services edit the name opendns refers to the dns concept of being open where queries from any source are accepted . it is not related to open source software ; the service is based on closed source software . 10 dns edit opendns offers dns resolution as an alternative to using internet service providers dns servers or locally installed dns servers . opendns has adopted and supports the dnscurve secure protocol . 11 opendns provides the following recursive nameserver addresses 12 for public use mapped to the nearest operational server location by anycast routing . opendns also provides the following recursive nameserver addresses as part of their familyshield 13 parental controls which block pornography proxy servers and phishing sites . name server ip addresses edit ipv4 addresses ipv6 addresses 14 standard 208.67.222.222 resolver1.opendns.com 208.67.220.220 resolver2.opendns.com 208.67.222.220 resolver3.opendns.com 208.67.220.222 resolver4.opendns.com 12 2620 0 ccc 2 2620 0 ccd 2 familyshield 15 208.67.222.123 resolver1 fs.opendns.com 208.67.220.123 resolver2 fs.opendns.com as of july 2013 opendns said that it handled over 50 billion dns requests daily . 16 opendns may have negligible performance gain 17 but may process queries more quickly than an isp with slow dns servers . 18 dns query results are sometimes cached by routers e.g. typically local isps queries may be cached by isps home routers the local operating system or applications so differences in speed may not be noticeable with every request but only with requests that are not stored in a local cache . dns services for personal home use edit on may 13 2007 opendns launched a domain blocking service to block web sites or non web servers visited based upon categories allowing control over the type of sites that may be accessed . the categories can be overridden through individually managed blacklists and whitelists . in 2008 opendns changed from a closed list of blocked domains to a community driven list allowing subscribers to suggest sites for blocking ; if enough subscribers the number has not been disclosed concur with the categorization of the site it is added to the appropriate category for blocking . as of 2014 update there were over 60 categories . the basic opendns service does not require users to register but using the customizable block feature requires registering . 19 other free built in features include a phishing filter . opendns also run a service called phishtank for users to submit and review suspected phishing sites . opendns supports the dnscrypt protocol which authenticates dns traffic between the user s computer and the name servers . 20 this requires installing free software onto supported devices . 21 in december 2007 opendns began offering the free dns o matic 22 service to provide a method of sending dynamic dns ddns updates to several ddns providers using dyndns s update api . 23 in october 2009 opendns launched premium services called home vip . for a charge the service offers increased reporting and block features and other services . dns services for paid business use edit in 2009 opendns launched opendns enterprise 24 a first foray into enterprise grade network security . opendns enterprise included the ability to share management of the product across a team along with an audit log expanded malware protection daily network statistic reports and a custom block page url . opendns expanded on the enterprise product in july 2012 with opendns insights . 25 this new service featured integration with microsoft active directory which allowed admins granular control over creating policies on a per user per device and per group basis . umbrella edit in november 2012 opendns launched its network security product suite called umbrella . umbrella 26 is designed to enforce security policies for mobile employees that work beyond the corporate network using roaming devices such as windows and mac laptops iphones and ipads and provides granular network security for all devices behind the network perimeter . it administrators can define policies provision devices and view reports across users sites networks groups and devices . in february 2013 the company launched the opendns security graph 27 to support umbrella . security graph is a data driven threat intelligence engine that automatically updates malware botnet snf phishing domain and ip blacklists enforced by umbrella . the data is sourced from the dns requests opendns receives plus the bgp routing tables that are managed by opendns s network operations center . added features edit opendns introduced the investigate feature to umbrella in november 2013 . investigate allows security teams to compare local traffic to global traffic to help determine the intent of an attack and help incident response teams prioritize events . in january 2014 the intelligent proxy 28 feature was added to the umbrella product suite . the opendns intelligent proxy only proxies connections if the requested domain is scored as suspicious or tagged as partially malicious by opendns security graph . one month later opendns announced a technology integration partnership with fireeye . 29 the collaboration allows indicators of compromise to be forwarded from fireeye s real time notification system to umbrella extending fireeye s protection to mobile employees and branch offices . umbrella for msps edit there is a distinct umbrella package for msps . 30 it features the same protection as the regular business packages but offers additional msp features a centralized multi tenant dashboard on demand monthly licensing and connectwise and autotask psa integrations . history edit in july 2006 opendns was launched by computer scientist and entrepreneur david ulevitch providing recursive dns resolution to homes schools and businesses . it received venture capital funding from minor ventures which is led by cnet founder halsey minor . in october 2006 opendns launched phishtank an online collaborative anti phishing database . before 2007 opendns was using the dns update api from dyndns to handle updates from users with dynamic ips . 31 in june 2007 opendns started advanced web filtering to optionally block adult content for their free accounts . nand mulchandani former head of vmware s security group left vmware to join opendns as new ceo in november 2008 replacing founder david ulevitch who remained as the company s chief technology officer . 32 david ulevitch resumed his post as ceo of opendns in late 2009 . 33 sequoia capital and greylock purchased the majority of shares held by halsey minor in july 2009 in a secondary transaction . then in conjunction with dag ventures all remaining shares held by minor were purchased in a similar fashion in early 2010 . 34 in june 2010 opendns launched familyshield a service designed to filter out sites with pornographic content . the service uses the dns addresses 208.67.222.123 and 208.67.220.123 . 35 the world economic forum announced the company as a technology pioneer for 2011 . 36 in march 2012 dan hubbard former cto at websense joined opendns as cto . 37 the opendns security labs were founded in december 2012 serving as a hub for research at the company . opendns launched security graph a security intelligence and threat detection engine in february 2013 followed by a series b 38 funding round . in may 2014 opendns announced a series c funding round totaling us 35 million 39 with new investors glynn capital management northgate capital mohr davidow ventures lumia capital evolution equity partners cisco chris sacca naval ravikant elad gill as well as previous backers greylock partners sequoia capital and sutter hill ventures . discontinued advertising edit opendns previously earned a portion of its revenue by resolving a domain name to an opendns server when the name is not otherwise defined in dns . this had the effect that if a user typed a non existent name in a url in a web browser the user saw an opendns search page . advertisers paid opendns to have advertisements for their sites on this page . this behavior is similar to verisign s previous site finder or the redirects many isp s place on their own dns servers . 40 opendns said that the advertising revenue paid for the free customized dns service . 41 it was discontinued on june 6 2014 ; 6 opendns said this was because of their move towards a security focus in their business . 6 competitors edit zscaler verisign dns firewall palo alto networks reception edit in 2007 david ulevitch explained that in response to dell installing browser address error redirector software on their pcs opendns started resolving requests to google.com . some of the traffic is handled by opendns typo correcting service which corrects mistyped addresses and redirects keyword addresses to opendns s search page while the rest is transparently passed through to the intended recipient . 42 also a user s search request from the address bar of a browser that is configured to use the google search engine with a certain parameter configured may be covertly redirected to a server owned by opendns which is within the opendns terms of service . 43 users can disable this behavior by logging in to their opendns account and unchecking opendns proxy option . 44 additionally mozilla users can fix this problem by installing an extension 45 or by simply changing or removing the navclient sourceid from their keyword search urls . this redirection breaks some non web applications that rely on getting an nxdomain response for non existent domains such as e mail spam filtering or vpn access where the private network s nameservers are consulted only when the public ones fail to resolve . breaking local name resolution can be avoided by configuring the dns addresses only in the forwarders of the local dns server or router the wan internet configuration of a router or other gateway . for other purposes or when the dns addresses can not be configured in a forwarder domains for which an nxdomain response is expected should be added to the exceptions for vpn users section of the opendns dashboard . most of the issues above have been resolved once opendns discontinued their advertising service and started responding with nxdomain and servfail instead of redirecting non existing domains . 46 see also edit alternative dns root dyndns dns.com google public dns norton dns opennic open root server network zscaler notes edit no more ads as of june 6th 2014 6 references edit crunchbase opendns page david ulevitch linkedin page opendns linkedin page open dns system current status of servers . retrieved 2013 01 18 . opendns is