Card and account numbers don't slip out through DNS
Collections agencies, insurers, brokers and lenders run call floors where agents handle card numbers, bank account numbers and SA ID numbers all day. ZDNS stops those numbers leaking out and blocks fake bank and courier sites for the whole floor, from one router setting, with nothing installed on agent PCs.
Checked on contents, not reputation
A brand-new domain an attacker registered this morning is on no blocklist. If its lookups carry a card or account number, ZDNS still blocks them.
Split numbers found too
Card numbers broken up with dots or dashes, or tucked inside a word, are joined back together and checked.
Slow leaks throttled
Lookups that look suspicious but not certain are held for about four seconds, then blocked, so malware that leaks data a little at a time grinds to a halt.
How it plays out
A 50-seat collections and insurance call centre. Illustrative, not a real customer.
- 1
A compromised PC starts sending collected policyholder data out in small pieces.
- 2
Each piece is disguised as a lookup for a different random-looking name on a new domain.
- 3
ZDNS blocks the lookups that carry account numbers outright and tarpits the scrambled ones, so the leak stalls.
- 4
Your dashboard lists each event; the activity report explains what was found in plain language.
Repeats about every 5 minutes · Find this computer →
Long numbers are masked to their last 4 digits before anything is stored.
Good to know
ZDNS checks every lookup for card numbers, bank account numbers and SA ID numbers, plus scrambled codes that malware uses to smuggle data. Here is what to expect.
Known bad sites too
Besides looking for data inside lookups, ZDNS blocks sites on Google's list of suspected phishing, malware and unwanted-software sites. Some risky sites may not be identified, and some safe sites may be identified in error.
What we keep
Only flagged lookups, with long numbers masked to the last 4 digits before anything is written, kept 90 days.
Nothing is blocked in week one
Every customer starts in shadow mode for about a week, sees what would be blocked, and whitelists anything they rely on before blocking starts.
Keep the card and account numbers you handle where they belong
R50 a seat a month, from 25 seats. One router setting. Protected in shadow mode from day one.