Matano Guard
One click on one bad link shouldn't reach your files
The worry in most offices is a staff member opening the wrong link on a busy afternoon. Matano Guard stops the bad site at your router before the page loads, on every device in the building, automatically and around the clock, so the network you hardened stays that way.
$49a month per location after $250 setup, month to month
The Curb Appeal Check is an external check of your domain. It doesn't look at your router. For that, ask through the form: we look at your router and firewall in a free conversation and tell you whether they're compatible before you pay anything.
Every lookup goes through the filter first
Before any device opens a website it asks where that site lives. Matano Guard makes the router send every one of those questions to our secure DNS gateway, which answers for safe sites and refuses for dangerous ones, so a bad page never starts to load.
A device asks
A laptop, a phone, the reception TV or a scanner asks where a site lives.
Your router
Sends every lookup to our secure DNS gateway, encrypted where the router supports it, and lets nothing go around it.
Our secure DNS gateway checks it
Against the threat lists and the categories you chose.
Bad site blockedThe page loads
Only if the site is safe and allowed.
Safe site loads
Read the transcript
One staff member. One link. Matano Guard checks every lookup at our secure DNS gateway first. A bad site is blocked before the page loads. Malware. Phishing. Command and control. Cryptomining. Newly registered domains. DNS tunneling. Blocked automatically, around the clock. Nothing to install. Filtering happens at your router, so it covers the devices nobody manages. A device can't opt out by changing its own settings. Changes when you ask, written down. Ask by email, text or ticket, with no ticket fee. Every change is backed up and logged, available on request. Works with the router you have. Ask us, and we check yours in a free conversation. Matano Guard. $250 setup, then $49 a month per location. Month to month, no contract. Annual contract discounts available. Run the free Curb Appeal Check at matanoit.com/check.
What it stops
Blocked for every device on the network, around the clock. Choose a category to see what it does to an office.
Malware
Software that installs from a bad link or download, then locks your files or copies your passwords.
- Software that installs from a bad link or download, then locks your files or copies your passwords.
- A page dressed up as your email login or your bank, built to collect a staff member's password.
- The address an infected computer contacts for instructions. Blocked, the infection can't take orders.
- Code that borrows your office computers to mine cryptocurrency, slowing them down while it runs.
- Sites set up in the last few days, before any list has had time to flag them as scams.
- Sites that have only just started appearing in traffic, held back until they have a history.
- A trick that hides stolen data inside ordinary-looking lookups to carry it out of the building.
Nothing to install on any device
The filtering happens at the router, so it covers whatever connects, including the things nobody in the office manages.
Example
- Computers
- Phones
- Tablets
- TVs
- Printers
- Scanners
- Guest devices
Dashed: the devices nobody in the office manages. Covered all the same.
Separate rules for the staff network and the guest network, and Safe Search enforced on Google, Bing and YouTube.
Works with the router you have
- UniFi
- pfSense
- Meraki
- Cisco
- SonicWall
- Fortinet
- Barracuda
- TP-Link Omada
- ISP-supplied routers
If it can set its DNS and block a port, it qualifies. We don't sell hardware for this. Ask through the form and we look at your router and firewall in a free conversation, and tell you whether they're compatible before you pay anything. Matano Guard is an optional add-on: $250 setup, then $49 a month per location.
What's included, and what isn't
Inside Matano Guard
- Bad sites blocked on every device
- Content rules you choose
- No way around it
- Encrypted lookups
- Policy changes, no ticket fee
- An alert if filtering stops
- Configuration backups
- A change log
- Guests kept apart
Outside it
- The hardening project
- Hardware, cabling, visits
- Protection on the computers
- Emergency work
- Round-the-clock human monitoring
Each line in full
Included
- Bad sites blocked on every device.Malware, phishing, command and control, cryptomining, newly registered and newly seen domains, and DNS tunneling, blocked before the page loads, with nothing installed on the device.
- The content rules you choose.Adult, gambling and any other categories you pick, separate rules for staff and guest networks, and Safe Search on Google, Bing and YouTube.
- No way around it.The router forces every lookup through the filter, encrypted DNS workarounds are blocked, and anything hard-coded to another resolver is blocked or redirected. A device can't opt out by changing its own settings.
- Lookups nobody can read on the way.Encrypted DNS from the router to our secure DNS gateway, where the router supports it, so the ISP and anyone on the path can't read or change your lookups.
- Policy changes included.Unblock a site, block a category, add a device exception, adjust the guest rules. Ask by email, text or ticket, with no ticket fee.
- An alert if filtering stops.If filtering ever stops, an automated alert reaches us and we act on it.
- Configuration backups.A copy of the router configuration after every change, so it can be rolled back to a known good state. Kept for you and available on request.
- A change log.Every change dated and written down, kept for you and available on request.
- Guests kept apart.We keep the staff and guest split in place and check that guest devices still can't reach the office equipment.
Not included
- The hardening project itself.Priced separately, starting with a read-only review. See network hardening.
- Hardware, cabling and on-site visits.
- A Wi-Fi cleanup.Channels, bands and settings sorted out, as part of the Wi-Fi and switch tune-up.
- Protection on the computers themselves.A separate product: EDR at $8 or MDR at $12 per device per month, month to month. Ask about endpoint protection.
- Emergency work.Billed hourly at our standard rates.
- Round-the-clock human monitoring.Blocking is automatic around the clock, and nobody has to read a report for it to work.
$49
a month per location
- One internet connection, one router
- Month to month, cancel any time, no contract
- Annual contract discounts available
- Optional: $250 setup, then $49 a month per location
Read-only network evaluation
$250
Not sure where your network stands? Start here. We read your router, firewall and network settings without changing anything, and send a written report: what we found, in the order we would fix it, with a quote for any work it calls for.
The $250 is credited in full against any paid work based on the evaluation, when you buy it within 30 days.
An example from a real deployment
A dental office, filtered the same evening
A dental office with two networks, one for staff and one for guests, and roughly a hundred devices between them, including scanners, TVs and tablets. Filtering went live the same evening, with no change to any device. The owner chose which categories to block.
Matano Guard is written for practices and offices with 5 to 50 devices and no IT person on staff: dental and medical offices, law firms, accountants and real estate offices. Anywhere a patient or client record lives on the network.