Machine translation, not reviewed by a native speaker. In case of doubt, the French text prevails.

Under construction · early access SANTVIA · Protection

The DNS that protects you,
before the page even loads.

Dnskrypt is a sovereign, encrypted, filtering DNS resolver: it blocks phishing, malware and trackers at the source, never logging your browsing. Hosted in the European Union.

Self-hostable on your own servers Encrypted (DoH · DoT) Blocks phishing & malware Zero browsing logs Hosted in the EU
dnskrypt — encrypted resolution
Protected query
  • DNS query encrypted end to end (DoH/DoT).
  • Phishing domain recognised and blocked.
  • No log of your browsing kept.
Filtering active — lists up to dateThreats are turned away before the connection.
In brief

A sovereign, encrypted DNS that filters threats at the source.

Dnskrypt is the DNS resolver of the SANTVIA galaxy: it resolves domain names while encrypting every query (DoH and DoT), blocks phishing, malware and tracking domains, and keeps no log of your browsing. Hosted in the European Union. The product is under construction; early access is available on request.

The problem

Your DNS sees all your traffic — and leaves it in the clear

Every site you visit begins with a DNS query. By default it goes out in the clear, readable by any intermediary, and often to a non-European resolver that records it. It's also the link phishing and malware exploit first.

In the clear, spyable

An unencrypted DNS query reveals every site visited to your provider, public Wi-Fi and any network intermediary.

Hijackable

Without protection, DNS gets hijacked: you're redirected to a fake site with no apparent change of address.

Non-European dependency

The most used public resolvers are outside the EU. They see all of your browsing and host it under foreign law.

The solution

Encrypted, filtering, sovereign — from the first query

Dnskrypt replaces your default resolver. Nothing heavy to install: protection acts at the network level, before the browser.

Encryption

Every query encrypted

DoH and DoT: your DNS queries go out encrypted, unreadable to intermediaries. No more DNS in the clear.

Filtering

Threats blocked at the source

Phishing, malware and tracking domains are turned away before the connection is even made. The danger never loads.

Privacy

Zero logs

Dnskrypt keeps no log of your browsing: no history, no profile, no resale. What you look up is your business alone.

Sovereignty

Resolved and hosted in the EU

The servers are hosted in the European Union, under European law. Your DNS never leaves the circle of trust.

Key features

Everything a protective DNS should do — as standard

The level of the best protective resolvers, with European sovereignty and zero-logging on top.

DoH & DoT

Queries encrypted with DNS-over-HTTPS and DNS-over-TLS.

Phishing & malware blocking

Dangerous domains recognised and turned away in real time.

Tracker blocking

Ad tracking cut at the DNS level, optional.

Category filtering

Parental controls and categories, on demand.

Zero logs

No retention of your browsing. Sovereign no-log.

Hosted in the EU

Resolvers in the European Union, under European law.

Low latency

A European network built for resolution speed.

Simple to enable

Workstation, mobile, router or network: a light setup.

Dnskrypt is the encrypted DNS of the hardened browser Navkrypt and complements the anti-scam Vigilvia: the same defence, from the network to the inbox. Each brick stays usable on its own.
The differentiator

Block the threat before the connection

An antivirus acts when the harm is already on the machine. Dnskrypt acts a step earlier: if the domain is dangerous, the connection doesn't even open.

Verifiable sovereignty

Trust is proven, not decreed

Dnskrypt doesn't ask you to take its word for it. Its architectural choices are checkable, and sovereignty is a fact, not an argument.

We display no certification we have not obtained. Any security qualifications will be announced once they are earned — never before. See the SANTVIA proof sheet →
Who it's for

Three uses, one same standard

Individual & family

Protection for the whole home

Block phishing and dangerous sites on every device in the house, with optional parental controls, no software to install on each one.

Regulated SME

Cut the attack surface

Cut phishing and malware at the network level, keep DNS queries encrypted and within a sovereign frame.

Public body

A controlled, European DNS

Filter, protect users and keep control of the service, without handing traffic to a non-EU resolver.

Dnskrypt is coming. Request early access.

The resolver is under construction. Write to us for early access, or to be told when it opens. No commitment.

Product under construction — no general availability yet. SANTVIA — RCS Aix-en-Provence 130 594 823.

FAQ

Frequently asked questions

What is Dnskrypt?

A sovereign, encrypted, filtering DNS resolver in the SANTVIA galaxy: it encrypts your queries (DoH/DoT), blocks phishing, malware and trackers, and keeps no log. Under construction; early access on request.

What's the difference between DoH and DoT?

Two ways to encrypt DNS: DNS-over-HTTPS (DoH) carries queries within web traffic, DNS-over-TLS (DoT) encrypts them on a dedicated channel. Dnskrypt supports both.

What does Dnskrypt block?

Phishing and malware domains, and — optionally — ad trackers as well as categories of sites via parental controls. You keep control of what's filtered.

Does Dnskrypt keep logs?

No. Dnskrypt is designed with no browsing log: no history, no profiling, no resale. Privacy is verifiable, not just displayed.

How do I use it?

By setting Dnskrypt as the DNS resolver on a workstation, a mobile, a router or the whole network. It also natively protects the sovereign browser Navkrypt.

Is it available today?

Not yet: Dnskrypt is under construction. Write to contact@santvia.eu for early access; general opening will be announced on this page.

SANTVIA, the sovereign galaxy

Dnskrypt is one brick of SANTVIA: sovereign communication, protection and digital compliance, hosted in France and Europe. One account, a sovereign copilot, proof rather than promises.

↑ Back to the mother company santvia.eu

Measured on this page, at every update

How it is measured

These figures are recalculated automatically each time the site is updated, from the code of this page: number of published language versions, resources loaded from another domain (fonts, scripts, styles, images), known audience measurement tools.