A look inside the Fortress
The dashboard that shows exactly what's being stopped, across the whole home.
Ads, trackers, phishing pages and known-malware domains simply never load — stopped at the door, on every device in the house.
A self-hosted guardian that sits between your home and the internet — encrypting your DNS, blocking the bad stuff, and quietly learning from GuardDex.
Every app and device in your home asks "where do I find this website?" hundreds of times a minute — that's DNS. Normally those questions go to your ISP in the clear, logged and sold. The Fortress answers them for you instead: it blocks the dangerous and annoying ones, sends the rest out encrypted and anonymized, and protects every device at once — phones, tablets, the smart TV, and the gadgets that have no security of their own. It runs on your own hardware, never Big Tech's.
Protection at the front door — covering the whole household, not one browser.
Point your router at it once and every device is covered — including the ones you can't install anything on.
~95% coverage of ads, trackers, telemetry, cryptominers and scam domains — using the best community blocklists, refreshed automatically.
Your lookups leave the network encrypted (DoT/DoH) and mixed through anonymizing relays — so no ISP or broker can log or sell where you go.
Known phishing, brand look-alikes, freshly-registered scam domains and malware callbacks never resolve — blocked before a byte loads.
Route your DNS out over the Tor network for maximum anonymity, with a single toggle.
Real health checks plus auto-restart mean a hiccup recovers on its own — it never silently leaves you exposed.
A blocklist only knows yesterday's bad domains. Connect the Fortress to GuardDex with one API key and it becomes a living shield.
GuardDex watches every domain your home resolves, in real time.
Each new domain is checked against GuardDex's threat intelligence, phishing brand database, IP-reputation engine and AI scam-language detection.
A malicious verdict is pushed straight back to the Fortress — so the next device that asks is already protected.
You get a plain-language alert (push / email / SMS) — including which device triggered it — and a trusted Guardian can be looped in.
Most DNS blockers stop at ads. This one is a hardened, honest, whole-home guardian.
One switch shields the kids, the grandparents and every gadget — especially the people scammers target most.
Encrypted, anonymized DNS means your every click isn't logged, profiled and sold.
A built-in verifier audits the Fortress and gives an honest verdict — HEALTHY / DEGRADED / BROKEN — so you're never fooled into a false sense of safety.
Forged DNS answers are rejected, so you reach the real site — not an attacker's look-alike.
Self-hosted on a Raspberry Pi or any Linux box, bound to your home and Tailscale mesh only — never an open resolver.
Built and supported by David & Stephanie Richey — you can actually reach us.
Run one command and get a full audit — control checks, DNSSEC, encrypted transports, per-category block coverage, latency, and a clear verdict.
HEALTHY / DEGRADED / BROKEN with an exit code — a non-resolving Fortress is flagged, never falsely reported as "100% blocked."
Encrypted DNS-over-TLS and DNS-over-HTTPS for your devices and apps that support it.
Technitium → validating Unbound → DNSCrypt anonymized relays → optional Tor. Defense in depth.
An installer auto-detects your network, generates its own secrets and certificate, brings it up and verifies it.
The dashboard that shows exactly what's being stopped, across the whole home.
Two ways to run it: do it yourself with a one-command installer, or let us set it up and manage it for you as part of the GuardDex family.