When MS-ISAC moved to a paid model, thousands of SLTT teams were left exposed or facing a surprise bill. Total Uptime Protective DNS meets all 11 NSA/CISA capabilities, protects your roaming staff, and our team sets it up with you.
CISA’s cooperative agreement with the Center for Internet Security ended on 30 September 2025. MDBR, the free Protective DNS that supported 7,000+ SLTT entities, moved to fee-based membership, and federal grant dollars generally can’t be used to pay for it.
Removes your cheapest, broadest layer of defense. Nearly every attack, ransomware, phishing, data theft, relies on a domain lookup. Drop DNS protection and you re-open all of it.
Absorb a new, unbudgeted cost for a like-for-like service, without re-evaluating whether it still covers roaming users, new domains, and the full NSA/CISA standard.
If you’re funding Protective DNS for the first time, fund one that meets all 11 NSA/CISA capabilities, follows users off-network, and comes with hands-on setup. That’s Total Uptime.
of malware command-and-control can be disrupted by secure DNS (NSA estimate)
deceptive sites blocked across our network every single day
NSA/CISA Protective DNS capabilities met — the full standard
NSA and CISA’s “Selecting a Protective DNS Service” (v1.3, March 2025) defines 11 capabilities a credible provider should deliver. Use it to compare any vendor. Total Uptime meets all of them.
Stops connections to known-malicious and command-and-control infrastructure.
Prevents users reaching credential-harvesting and spear-phishing sites.
Identifies data being smuggled out over DNS.
Machine-learning analysis of unknown domains in real time.
Filters domains serving malicious ads and payloads.
Per-network policy control across dozens of categories.
Google, Bing, DuckDuckGo and YouTube restricted modes.
Windows, Mac, iOS, Android and ChromeOS clients.
Real-time logs for investigation and reporting.
From 10 to 100,000+ users with anycast performance.
Threat, activity and top-destination dashboards.
Manage policies programmatically and integrate with your stack.
Most county, city, district and tribal IT teams are stretched thin. Any replacement has to be effortless to run, and get you covered fast.
A 20-minute walkthrough plus a like-for-like comparison against your current MS-ISAC/MDBR costs at no obligation.
Transparent, entity-sized pricing. We’ll show you exactly how it compares.
Real organisations. Real resilience. Real results.
Agencies are generally prohibited from using federal cyber-grant dollars to pay for MS-ISAC membership specifically. Rules vary by grant program and for commercial services, we’ll help you understand the options, but always confirm eligibility with your grant administrator.
Some states (for example, Texas, covering 6,000+ entities) have centralized membership. If yours has, you may already be covered for MDBR, though many teams still evaluate Total Uptime for broader capabilities like roaming coverage and real-time detection. If your state hasn’t, the gap is on you today.
Because there’s no endpoint agent and no change to the user experience, most organizations are live within days. Our team runs the configuration with you.
MDBR delivered core malicious-domain blocking. Total Uptime meets all 11 NSA/CISA capabilities, adds machine-learning detection of brand-new domains (rather than waiting on static lists), roaming protection across every major platform, content filtering and full reporting, from a single service.
Get a straight, itemized comparison against your MS-ISAC/MDBR costs and see the full 11-capability match, in 20 minutes.