other

Updated:

DNSFilter

Ken Carnesi founded DNSFilter in 2015. The Washington, DC cybersecurity company protects 45,000+ organizations with AI-powered DNS threat blocking.

DNSFilter

Ken Carnesi and Brian Gillis started DNSFilter in October 2015 with the goal of building what the company calls "the best DNS filter on the market." Carnesi, who had experience with existing DNS security solutions, designed the product to combine threat blocking with ease of use. The company has grown to over 140 employees. DNSFilter's core product is a protective DNS service that blocks access to malicious and unwanted content across all devices, on and off a network. The company uses machine learning to categorize threats and supplements its own data with external feeds. DNSFilter serves enterprises, managed service providers (MSPs), and small-to-medium businesses. Its dual Anycast network claims to be the world's fastest DNS resolver. Notable acquisitions include Guardian, a privacy-protecting firewall for mobile devices, and Webshrinker, a threat intelligence provider. The company's customer base exceeds 45,000 organizations, and it blocks millions of threats daily. The company has raised a total of $48.5 million in disclosed venture funding. Insight Partners and Arthur Ventures led a $33.5 million Series A in 2021, followed by a $15 million Series A extension. DNSFilter maintains its headquarters at 80 M St SE in Washington, DC. A recent acquisition: in 2023, DNSFilter acquired Zorus, a security platform aimed at MSPs, to expand its managed-security capabilities. DNSFilter operates as a venture-backed cybersecurity product company rather than an investment firm or family office. Its differentiation lies in combining AI-driven threat detection with a globally distributed DNS network, enabling real-time blocking without requiring on-premises hardware. The company distributes primarily through MSP partners, counting more than 3,000 such relationships.

General information

Firm type

other

Year founded

2015

AUM

Undisclosed

Location

Region

North America

Country

United States

City

Washington

Corporate office

Washington, DC, United States

Principals

Ken Carnesi

CEO and co-founder

Brian Gillis

Chief Architect and co-founder

Sector focus

Cybersecurity

Frequently asked questions

Who runs investment decisions at DNSFilter?

DNSFilter is not an investment firm. The company is led by CEO and co-founder Ken Carnesi, who oversees product and business strategy along with a leadership team that includes Aliese Alter, Mandy Cole, Karl Hutter, TK Keanini, Mike Okoth, Lauren Romer, and Rich Scott (per DNSFilter's team page).

How does DNSFilter source proprietary deal flow?

DNSFilter is a cybersecurity product company, not an investment firm. It does not source deal flow. The company acquires complementary technologies—such as guardian, Webshrinker, and Zorus—to enhance its DNS security platform (per the firm's timeline).

Is DNSFilter structured as a single family office or does it operate more like a venture firm?

Neither. DNSFilter is a venture-backed cybersecurity company. It has raised $48.5 million from institutional investors Insight Partners and Arthur Ventures, and operates as a Delaware corporation with a board of directors and over 140 employees (per the firm).

What investment stages does DNSFilter typically target?

DNSFilter does not make investments. The company itself raised a Series A and a Series A extension, both led by Insight Partners and Arthur Ventures (per the firm, 2021 and 2022).

Which sectors does DNSFilter explicitly avoid?

DNSFilter does not make investment decisions. As a cybersecurity vendor, its product addresses security threats across all verticals. The company has not publicly stated any sectors it avoids.

Where does the underlying wealth come from?

Not applicable. DNSFilter is not a family office or wealth manager. The company's funding comes from venture capital firms, not a single family's fortune.

Does DNSFilter maintain philanthropic structures, and how are they separated?

The firm does not disclose any philanthropic foundations or charitable vehicles on its public website or in press materials.

Profile maintained by using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.

Need institutional-grade insight on family offices?

Altss delivers:

Principals with verified direct contactsAllocation history by asset classOSINT-derived deal signals
Book a demo

Prefer a guided tour?

We’ll walk you through:

Interactive funding timelinesCustom mandate & allocation filters
Book a demo