HeyShield

HeyValue Shield is an enterprise-grade DNS security solution designed for telecommunications providers, internet service providers, government agencies, educational institutions and businesses. It enables organizations to enforce network policies, protect users from online threats and ensure compliance with regulatory requirements.

Whether you are a telco protecting subscribers, an ISP offering value-added security services, a government agency safeguarding public networks, a school protecting students or an enterprise securing employee devices, HeyValue Shield provides centralized, policy-driven internet protection at scale.

Who uses HeyValue Shield

• Telecommunications providers: offer subscribers built-in protection against malware, phishing and inappropriate content as a premium service.
• Internet service providers: differentiate your offering with DNS-based security that protects households and businesses.
• Government agencies: enforce acceptable use policies and protect public networks, libraries and community access points.
• Educational institutions: create safe learning environments by filtering harmful and distracting content on school-managed devices.
• Enterprises: protect corporate devices and enforce internet usage policies across your workforce.

Key features

• Policy-driven protection: configure filtering rules centrally and deploy across thousands of devices.
• Threat prevention: block malware, phishing, botnets and other security threats at the DNS layer.
• Content filtering: enforce acceptable use policies by category (e.g. adult content, gambling, social media, streaming).
• Device-wide coverage: protection applies across all apps and browsers, not just a single application.
• Lightweight and efficient: DNS-based filtering with minimal impact on device performance and battery life.
• MDM compatible: deploy via enterprise mobility management solutions for seamless rollout.

How HeyValue Shield works

When a device looks up a website (a DNS query), HeyValue Shield checks the domain against your organization's security policies. Blocked domains are stopped before a connection is made, preventing threats and policy violations at the network layer.

HeyValue Shield operates at the DNS level and does not inspect the content of web pages, messages or files. It controls which domains can be reached, providing a balance between security, privacy and performance.

Use of VPN / Network Extension (required disclosure)

HeyValue Shield uses Apple’s Network Extension framework to provide system-wide DNS filtering on iOS:

• HeyValue Shield can create an on-device “VPN-like” configuration (e.g., DNS Proxy or Packet Tunnel Provider) to securely handle DNS queries from all apps and browsers.
• Only DNS queries are processed for filtering and policy enforcement. Other internet traffic continues to use the normal network connection unless your deployment explicitly routes traffic through a tunnel.
• HeyValue Shield is not a general-purpose VPN. It does not change the device’s public IP address, hide location, bypass geo-restrictions or provide anonymous browsing.
• Network Extension permissions are required to apply DNS-based filtering consistently across the entire device.
• DNS requests are encrypted between the device and the filtering service (where supported by your configuration), helping protect integrity and privacy.

HeyValue Shield uses Network Extension solely as a technical mechanism to enable DNS-based security and policy enforcement across all applications.