ThreatBook OneDNS
ThreatBook Co., LTD. · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
ThreatBook OneDNS is a cloud-based, DNS-layer Secure Web Gateway that fuses global threat intelligence with high-performance recursive DNS resolution. Deployed as a SaaS service in minutes, OneDNS protects office networks, branch offices, and roaming endpoints against ransomware, phishing, APT C2 callbacks, malicious mining, trojans, and non-compliant content, all at the DNS layer, before a connection is ever established.
KEY CAPABILITIES
Show the rest of the publisher’s description (9 more lines)
Advanced threat intelligence: ThreatBook CTI cloud is updated in minutes with a detection accuracy of 99.9 percent, blocking newly emerging threats including ransomware, APT C2, phishing, and mining malware.
Stable and fast DNS resolution: 99.999 percent service availability backed by a distributed anycast architecture with automatic load balancing and node-level fault self-healing.
Centralized multi-tenant management: One administrator account manages headquarters, sub-organizations, branches, and remote roaming devices with hierarchical policies.
Granular policy control: Content category filtering, custom domain block and allow lists, DNS tunnel interception, and compromised-host localization with endpoint process forensics.
Visualization and reporting: Real-time dashboards, DNS log search, IM and email alerting, scheduled security reports, and open API access.
WHY ONEDNS
ThreatBook is a leading threat intelligence vendor in Greater China by market share and a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years. ThreatBook is also recognized in the 2025 Gartner Magic Quadrant for Network Detection and Response. OneDNS has protected office networks for 5,000 plus enterprises including major banks, securities firms, energy and manufacturing companies for over a decade.
DEPLOYMENT
SaaS. No hardware, no on-premises agents required for network-based protection. A lightweight optional client is available for roaming endpoint coverage. Activation is completed by the ThreatBook team within one business day of subscription via AWS Marketplace.
Highlights
Highlighted by the publisher on AWS Marketplace.
99.999 percent DNS resolution availability backed by a global anycast network with automatic load balancing and node-level fault self-healing.
Powered by ThreatBook threat intelligence, a Gartner Representative Vendor for Threat Intelligence Products and Services for 4 consecutive years.
SaaS deployment in minutes with no hardware or agents. One console centrally manages headquarters, branches, and roaming endpoints from a single account.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
5 listed- Units
- Units
- Units
- Units
- Units
Refund terms
As stated by the publisher on AWS Marketplace.
Refund policy: All sales are final. ThreatBook does not provide refunds for subscription fees paid through AWS Marketplace, except as required by applicable law or expressly agreed in a Private Offer. Customers may cancel future renewals through the AWS Marketplace console. For refund requests, contact ThreatBook Support at contactus@threatbook.io. Response within 1 business day, Hong Kong time.
Sources
Linked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.