# Does NetSenX detect DNS tunnelling on every plan?

Yes. DNS tunnelling alerts are included on every plan, Free and Starter included. DNS tunnelling hides data or commands inside DNS lookups, usually as long, random-looking names sent to one domain. NetSenX alerts on that pattern. Other DNS-related detections are still being measured and do not raise alerts yet, so NetSenX does not claim to detect other kinds of DNS abuse. Independently of NetSenX, you can reduce the risk by sending all DNS through your own resolvers, blocking direct DNS to the internet from workstations, and keeping resolver logs. Remember that encrypted DNS sent over HTTPS to an outside provider is not visible as DNS to any network sensor.

FAQ: [NetSenX: plans and set-up](https://netsenx.com/en/faq/product) · https://netsenx.com/en/faq/does-netsenx-detect-dns-tunnelling-on-every-plan

## Read next

- https://netsenx.com/en/pricing
- https://netsenx.com/en/features

## Related questions

- [How do I stop backup jobs from triggering security alerts?](https://netsenx.com/en/faq/how-to-stop-backup-jobs-from-triggering-security-alerts)
- [What does a false-positive bound mean for a small IT team?](https://netsenx.com/en/faq/what-does-a-false-positive-bound-mean-for-a-small-it-team)
- [What is the NetSenX Math Guarantee?](https://netsenx.com/en/faq/what-is-the-netsenx-math-guarantee)
- [What exactly does the NetSenX Math Guarantee guarantee?](https://netsenx.com/en/faq/what-exactly-does-the-netsenx-math-guarantee-guarantee)
- [Does NetSenX offer a 24/7 monitoring service?](https://netsenx.com/en/faq/does-netsenx-offer-a-24-7-monitoring-service)