Skip to content
CUNICULA
Back to directory

Quad9

A privacy-preserving tool offering genuine utility.

Zero KYCTrust 52/100CH
Best useGeneral usageDNS
KYC postureZero KYCNo account or identity verification.
Main riskCAUTIONResolver operator still sits in the DNS path.
Review proofReviewed 2026-06-22KYC checked 2026-06-22 / verified jurisdiction / official site batch 7 2026 06 22

Trust

CAUTION
JURISDICTIONCH
STATE ACTORGCA co-founder and Quad9 board member Philip Reitinger is a career US government cybersecurity insider: former DHS Deputy Undersecretary (National Cyber Security Center director 2009), first Executive Director DoD Cyber Crime Center, DOJ Computer Crime section prosecutor, Microsoft Chief Trustworthy Infrastructure Strategist, Sony CISO. IBM (threat intelligence provider) is a major US national security contractor — IBM X-Force data determines Quad9 domain blocking decisions.
WARNINGResolver operator still sits in the DNS path. Threat blocking depends on vetted third-party intelligence providers, and the existing IBM/GCA governance caveat remains relevant for adversarial threat models.
AUDITED BYNone on record
TRUST SCORE
52
LAST VERIFIED6/24/2026
LAST UPDATED6/22/2026

Specs

KYC LEVELZero
KYC TRIGGERSNo account or identity verification. Quad9 transparency materials state there is no user database and no account-to-query correlation.
FEEFree
CATEGORIESDNS
BEST FORGeneral usage
FEATURESDNS over HTTPS, DNS over TLS, Malware blocking, No IP logging, Swiss nonprofit, DNSSEC validation, No account required
TOR
REGIONS1 country — Global

About

Free public recursive DNS from the Swiss Quad9 Foundation with malware blocking, DNSSEC and DoH/DoT/DoQ options. Quad9 says it has no user accounts and does not correlate end users, including by IP address, to resolver queries.

Follow the Money

  Quad9 Foundation — Zürich, Switzerland
  ──────────────────────────────────────
  Board: PCH + Global Cyber Alliance
  Funder: IBM (donated 9.9.9.9 IP)
  Revenue: donations + IBM partnership
  ├─ GCA co-founder: ex-DHS cybersec
  ├─ IBM X-Force controls blocklist
  └─ Swiss nonprofit, no query logs
Quad9 — ownership and funding chain

We wrote about this

Frequently Asked Questions

Does Quad9 require KYC or identity verification?

No. Quad9 does not require identity verification (KYC) for typical usage. No account or identity verification. Quad9 transparency materials state there is no user database and no account-to-query correlation.

What payment methods does Quad9 accept?

Please check the provider site for accepted payment methods.

Is Quad9 available in my country?

Quad9 is available in: GLOBAL.

Is Quad9 based in a Five Eyes country?

No. Quad9 is based in CH, which is not a Five Eyes member country.

Is Quad9 safe to use for privacy?

Use Quad9 with caution. Resolver operator still sits in the DNS path. Threat blocking depends on vetted third-party intelligence providers, and the existing IBM/GCA governance caveat remains relevant for adversarial threat models.

Related Services

97
Mullvad DNS

Free public encrypted DNS from Mullvad with DoH and DoT endpoints plus optional ad, tracker, malware and adult-content blocking. No account is required, and Mullvad states it does not log DNS requests.

Zero KYC
40
NextDNS

Configurable private DNS firewall with DoH/DoT/DoQ, blocklists, analytics and per-device profiles. It works without signup for trial use; paid plans accept cards, PayPal and cryptocurrency, and logging retention can be disabled or configured.

Light KYC

Compare