Bastion filters the web at the DNS level — block adult content, social media, gambling and distractions on any phone, tablet or laptop. No hardware. No app to install. Manage everything from one simple dashboard.
Bastion routes each device's DNS through a filter you control. Nothing to plug in, nothing to root or jailbreak.
Name the phone, tablet or laptop you want to protect. Bastion creates a private, per-device address so each one is managed on its own.
Scan a QR or download a one-tap profile. Guided steps for iOS, Android (Stock, MIUI, OneUI, ColorOS), macOS and Windows.
Toggle categories, block a specific site, and review the last 7 days of activity — all from a clean dashboard on your own phone.
The whole product lives in one tidy dashboard. Tap through a few of the screens you'll use most.
Start with a single family device and grow all the way to a dedicated, isolated instance for your business.
Keep teenagers' phones and tablets free of adult content and endless scrolling — without fighting over the device.
Apply productivity rules across employee devices, onboard with a profile push, and report on activity per person.
Your own isolated instance on a dedicated VPS. Full traffic isolation for compliance-sensitive teams in finance, health and legal.
Thoughtful defaults out of the box, with the controls to go further when you need them.
One tap to block adult content, social media, gambling, gaming and streaming — curated, maintained blocklists.
Block or allow any specific domain, per device or across the whole account, in seconds.
See top domains, what was allowed and what was blocked — grouped and readable, per device.
Every device gets a private address, so rules and history never get mixed up between them.
Push a profile to company iPhones via Apple Business Manager, or send a guided link for personal devices.
Per-employee summaries for business accounts, exportable for review — no spreadsheets required.
Filtering is a strong layer, not a magic wall. We'd rather you know exactly where the edges are.
A bypass-resistant Android app is on our roadmap.
Family, business and enterprise — monthly or annual, no hidden fees. Pay only for the devices you protect.
No. Bastion works by changing a device's DNS settings — on iOS and macOS you install a small configuration profile, and on Android you set a Private DNS hostname. We give you guided, device-specific steps for each one.
Both. Because filtering happens at the DNS level on the device itself, your rules follow the device whether it's on home Wi-Fi, school Wi-Fi or cellular data.
On a device where they can freely change DNS settings, yes — so we recommend protecting those settings with a Screen Time passcode (iOS) or device restrictions (Android). On company-managed iPhones enrolled via MDM, the profile cannot be removed by the user.
Business plans (SME) run on a shared, secure cloud instance and cover up to 29 devices with per-employee reporting. Enterprise gives you a dedicated, isolated VPS with filtering beyond DNS — built for compliance-sensitive teams.
We keep only what's needed to show you the dashboard — a rolling 7-day query history per device. Enterprise customers can run on their own isolated instance for full data control.
Join the private beta and be among the first families and teams running on Bastion.