Honest side-by-side. We list where olladns wins, where it doesn't, and what's still in development. Every claim about ourselves is verifiable in our public changelog; claims about competitors come from their public docs as of mid-2026.
| Feature | olladns | NextDNS | ControlD |
|---|---|---|---|
| OpenAPI 3.1 spec served at runtimeapi.olladns.com/api/v1/openapi.json — 106 operations, x-required-scopes on every secured op | ✓ | — | — |
| MCP server (Anthropic spec)Configure DNS from Claude / Cursor / Continue without leaving the editor | ✓ 49 auto-generated + 5 hand-curated workflows (54 total) | — | — |
| Scoped API tokens (resource:action)e.g. analytics:read, policies:write | ✓ 19 scopes | single capability | single capability |
| Actor-attributed audit logEvery change tagged 'user #N' or 'agent #N' | ✓ | user only | user only |
| Outbound webhooks (HMAC-signed) | ✓ | ✓ | via integrations |
| Feature | olladns | NextDNS | ControlD |
|---|---|---|---|
| Curated blocklistsAds, malware, phishing, trackers, AI scrapers, etc. | 60 across 14 categories | ~100 | ~40 |
| DGA classifier (algorithmic-domain detection)olladns: transparent feature-based, open source, 0 USD/yr | ✓ explainable | ✓ opaque | ✓ opaque |
| Typosquat detection (per-tenant protect list) | ✓ Damerau-Levenshtein + Cyrillic homoglyphs | — | — |
| NRD (newly-registered domains) blocking | — no feed installed | ✓ real-time | ✓ real-time |
| Parked-domain detectionolladns: deferred, needs paid passive-DNS feed | roadmap | ✓ | ✓ |
| DoH/VPN/proxy bypass blockingBlock known evasion endpoints | — roadmap | via lists | via lists |
| Feature | olladns | NextDNS | ControlD |
|---|---|---|---|
| Custom block / allow rules with wildcards | ✓ | ✓ | ✓ |
| DNS rewrites (A / AAAA / CNAME / NXDOMAIN / REFUSED) | ✓ | ✓ | ✓ 'Redirect' |
| Allowlist-only (default-deny) mode | ✓ | ✓ | ✓ |
| TLD blocking (.zip, .xyz, etc.) | ✓ | ✓ | ✓ |
| Per-tenant DNS rewrites coexist with custom rules + TLD blocks + default-deny | ✓ 5 categories independent | ✓ | ✓ |
| Schedule-based service blocking (time-of-day windows) | ✓ | ✓ | ✓ |
| Safe Search enforcement (Google / Bing / DDG / YouTube / Yandex / Ecosia / Pixabay) | 7 engines | 7 engines | core engines |
| Feature | olladns | NextDNS | ControlD |
|---|---|---|---|
| Per-tenant query log with rich filters | ✓ | ✓ | ✓ |
| AI tool classification at ingestChatGPT, Claude, Gemini, Cursor, etc. | ✓ | via blocklists | via blocklists |
| Bulk CSV / NDJSON export for SIEM | ✓ 10M rows/call | ✓ UI export | ✓ |
| Per-device identificationEach device gets its own DoH URL suffix | ✓ | ✓ | ✓ via ctrld agent |
| Per-tenant log retention (1-365 days, configurable) | ✓ | ✓ | ✓ |
| Per-tenant log anonymization toggleDrop client IPs at ingest | ✓ | ✓ | ✓ |
| Feature | olladns | NextDNS | ControlD |
|---|---|---|---|
| DoH + per-tenant routing | ✓ | ✓ | ✓ |
| SOC 2 Type II reportolladns: observation in progress, target Q3 2026 | in progress | ✓ | ✓ |
| India (Mumbai) region for DPDP residency | roadmap | — | — |
| Anycast / multiple PoPs | — | ✓ 100+ PoPs | ✓ 100+ PoPs |
| SAML / OIDC SSO | roadmap | ✓ | ✓ |
| Native router agents (OpenWrt / pfSense / etc.) | — | ✓ CLI | ✓ ctrld |
| Native mobile apps (iOS / Android) | — | ✓ | ✓ |
| Open responsible-disclosure policy | ✓ 90d window | ✓ | ✓ |
| Public subprocessor list | ✓ | ✓ | ✓ |