Cloud-Based Threat Prevention
Cloud Shield is VeloGuardian's DNS filtering. While you are connected, the domains your device looks up are checked on our servers, and blocked ones never load.
Key point: Because Cloud Shield operates in the cloud, there is nothing to install or maintain on individual devices. Blocklists are updated on our servers, with nothing for your IT team to do.
What Cloud Shield Protects Against
Cloud Shield provides several layers of security, all working together:
- Malware: On Fortress and Citadel, known malware domains are blocked on our servers. Nothing runs on your device.
- Phishing: On Fortress and Citadel, known phishing domains are blocked.
How Cloud Shield Works
When a device running VeloGuardian connects to the internet, it first creates an encrypted WireGuard tunnel to the VeloGuardian network. Your device's DNS lookups then go through the tunnel to our DNS servers. Domains on your plan's blocklists are refused; everything else resolves normally.
This entire process happens in milliseconds. Users experience no noticeable delay, but every DNS lookup is checked.
Privacy by Design
Filtering looks only at the domain names your device looks up; the content of your traffic is not inspected. VeloGuardian does not include third-party analytics or advertising in its apps or security pipeline.
Cloud Shield does not log, store, or inspect the contents of your data. Your traffic data is never sold or shared.
Always Up to Date
Cloud Shield's blocklists, including known phishing domains, are updated on our servers, with nothing for you to install.