# DNS hosting privacy ratings

Services that host the DNS records for your own domains.

**Our pick:** [Cloudflare DNS](https://privacyratings.com/dns-hosting/cloudflare-dns/): Free on every plan, one of the fastest DNS networks, a complete API, and hardware security key login. DNSSEC is automatic when the domain is also registered with Cloudflare Registrar.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Cloudflare DNS](https://privacyratings.com/dns-hosting/cloudflare-dns/) (our pick) | C (66/100) | United States (Five Eyes) | Authoritative DNS hosting on Cloudflare's anycast network with a free plan, DNSSEC, an API and security-key login. |
| [deSEC](https://privacyratings.com/dns-hosting/desec/) | B (77/100) | Germany (Fourteen Eyes) | Free authoritative DNS hosting from the Berlin non-profit deSEC e.V., with automatic DNSSEC signing, a full REST API and open-source software. |
| [Amazon Route 53](https://privacyratings.com/dns-hosting/amazon-route-53/) | D (52/100) | United States (Five Eyes) | Authoritative DNS hosting and domain registration service from Amazon Web Services, with health checks, routing policies and pay-per-use pricing. |
| [DNSimple](https://privacyratings.com/dns-hosting/dnsimple/) | D (52/100) | United States (Five Eyes) | Paid managed DNS hosting and domain registrar with DNSSEC, secondary DNS, an API, a CLI and a Terraform provider. |
| [LuaDNS](https://privacyratings.com/dns-hosting/luadns/) | D (52/100) | Romania | Anycast DNS hosting from Romania with DNSSEC, a REST API and git integration that builds zones from BIND or Lua files, with a free plan and paid plans. |
| [Bunny DNS](https://privacyratings.com/dns-hosting/bunny-dns/) | D (43/100) | Slovenia | Authoritative DNS hosting from the Slovenian CDN provider bunny.net, with DNSSEC, scriptable DNS records, health-check failover and usage-based pricing. |
| [Hetzner DNS](https://privacyratings.com/dns-hosting/hetzner-dns/) | D (43/100) | Germany (Fourteen Eyes) | Free authoritative DNS hosting from the German provider Hetzner, managed in the Hetzner Console and through the Hetzner Cloud API. |
| [ClouDNS](https://privacyratings.com/dns-hosting/cloudns/) | F (36/100) | Bulgaria | Managed DNS hosting from Bulgaria with a free plan and paid plans adding anycast, DNSSEC, GeoDNS, DDoS protection, secondary DNS and failover. |
| [Hurricane Electric Free DNS](https://privacyratings.com/dns-hosting/hurricane-electric-free-dns/) | F (25/100) | United States (Five Eyes) | Free authoritative DNS hosting from the US network operator Hurricane Electric, with forward and reverse zones, secondary DNS and dynamic DNS updates. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?
- **DNSSEC** (weight 3): Can DNSSEC be turned on for hosted zones?
- **API access** (weight 1): Can records be managed through an API on every plan?
- **Two-factor login** (weight 2): Do accounts support two-factor authentication with an authenticator app or security key?

Source: https://privacyratings.com/dns-hosting/