Our ad business was turned off earlier this year. We don't do it either. http://www.opendns.com/no-more-ads/ http://www.opendns.com/no-more-ads/ Moreover, we

Our ad business was turned off earlier this year. We don't do it either. http://www.opendns.com/no-more-ads/ http://www.opendns.com/no-more-ads/ Moreover, we give users two very powerful differences neither of the other options you mentioned do, along which achieving a philosophical model that better maps to the way security should be deployed on the Internet. 1) The ability to granularly control the policy down to the device or user. 2) The ability to bypass blocked sites with credentials. This is because we push policy to the edge. Security enforcement must be done at the edge to be done properly, doing it in the core (like an ISP or IX) is the wrong place to enforce security policy because it forces a one-size-fits-all approach that is inappropriate for Internet users.