Sanaf AI
Start free
Security & Identity Tools

Control D, worked by an AI employee

Not another app for your team to learn, and not a set of rules for you to build. You hire an AI employee, you give it access to your Control D account, and you ask it for things in Slack or Teams the way you would ask anyone else on the team. There is nothing to map and nothing to maintain.

  • Security & Identity Tools
  • Connects with a key
  • 48 ready-made tools
  • Asked in Slack or Teams
At work

An illustration of how the conversation reads, not a transcript from a client account.

What Control D is

Control D is a customizable DNS filtering and traffic redirection platform that allows users to manage internet access, enforce policies, and monitor usage across devices and networks.

You paste in a key from your own Control D account. It is kept encrypted, and you can withdraw it from inside Control D whenever you like.

How a run works

One message in, the work done in Control D.

  1. 01

    You ask

    You message your AI employee in the chat your team already has open, in one sentence, in your own words.

  2. 02

    It works out the step

    It decides what the job needs in Control D. You do not pick anything from a menu or wire anything together.

  3. 03

    It does the work

    Signed in to your own Control D account, inside the access you granted it, doing the thing you asked for.

  4. 04

    It reports back

    It tells you what it did, in the same thread. If it could not do something, it says so rather than guessing.

48 tools it already has

What it can do in Control D

These are the ready-made tools your AI employee already has in Control D. It is not limited to them, but it never has to be taught these.

  • Bulk Update Profile FiltersTool to bulk update filters on a specific profile. Use when you need to enable or disable multiple filters at once. Provide a list of filter IDs with desired states.
  • Create Custom Rules for ProfileTool to create custom rules for a profile. Use after confirming the profile ID and preparing rule definitions. Provide a list of rule objects matching the API schema.
  • Create Custom Rules in Profile FolderTool to create custom rules within a specific folder for a profile. Use after confirming the profile and folder IDs and preparing rule definitions.
  • Create DeviceTool to create a new device. Use when you need to provision devices and retrieve their DNS resolvers.
  • Create ProfileTool to create a new blank profile or clone an existing one. Use when you need to provision a profile before assigning rules or devices.
  • Create Profile ScheduleTool to create a new schedule within a specific profile. Use after gathering profileid and schedule details.
  • Delete Device by IDTool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the deviceid.
  • Delete Profile by IDTool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.
  • Delete Profile Rule by HostnameTool to delete a specific custom rule by hostname from a profile. Use after confirming profileid and hostname.
  • Delete Profile Rule by Rule IDTool to delete a specific custom rule by its ID within a profile. Use after confirming profileid and ruleid.
  • Delete Profile Rule in FolderTool to delete a specific custom rule within a folder. Use after confirming profileid, ruleid, and folderid.
  • Delete Profile ScheduleTool to delete a specific schedule within a profile. Use after confirming profileid and scheduleid.
  • Get Analytics EndpointsTool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.
  • Get Analytics Log EntryTool to retrieve a specific analytics log entry by its ID. Use when you need details of an analytics log for a given profile.
  • Get Custom Rule by Rule IDTool to retrieve details of a specific custom rule by its ID. Use after confirming the profileid and ruleid to fetch that rule's metadata.
  • Get DevicesTool to list all devices associated with the account. Use when you need to retrieve device inventory after authentication.
  • Get Organization DetailsTool to view the authenticated organization's details. Use after confirming a valid API token.
  • Get Profile AnalyticsTool to retrieve analytics data for a specific profile. Use after the profile has accrued usage data to fetch analytics.
  • Get Profile Analytics LogsTool to list analytics log entries for a given profile. Use after confirming profile ID and optional date filters to fetch logs.
  • Get Profile Analytics SummaryTool to fetch a summary of analytics data for a given profile. Use after confirming profile ID and desired date range.
  • Get Profile Analytics Top DomainsTool to fetch top domains accessed within a specific profile. Use after confirming profile ID.
  • Get Profile by IDTool to retrieve details of a specific profile by its ID. Use when you need full profile details after confirming the profileid.
  • Get Profile FiltersTool to list native filters associated with a specific profile. Use when you have a profile ID and need to retrieve its filters and their states.
  • Get Profile FoldersTool to list rule folders (groups) within a profile. Use when you need to retrieve all folders for a given profile after confirming the profile ID.
  • Get Profile OptionsTool to get all available profile options. Use when you need to retrieve the possible configurations for profiles after authenticating.
  • Get Profile ScheduleTool to retrieve a specific schedule by its ID within a profile. Use when you need details of a profile schedule after confirming the profileid and scheduleid.
  • Get Profile SchedulesTool to list schedules associated with a specific profile. Use after confirming the profile ID.
  • Get Profile ServicesTool to list services associated with a specific profile. Use when you need to retrieve all services that have any associated rules after confirming the profile ID.
  • Get Profile Top ServicesTool to fetch top services accessed within a profile. Use after confirming the profile ID and desired date range.
  • Get ProfilesTool to list all profiles associated with the authenticated account. Use when you need an overview of accessible profiles.
  • Get Service CategoriesTool to list all service categories. Use when you need to retrieve available categories before filtering or assigning services.
  • Get Specific Rule in FolderTool to retrieve a specific rule within a folder by its ID. Use when you need full details of a custom rule in a profile's folder.
  • Get UsersTool to retrieve user account data. Use when you need account details after authentication.
  • List Custom Rules for ProfileTool to retrieve custom rules associated with a specific profile. Use after confirming the profile ID. Omit folderid to list rules in the root folder.
  • List Custom Rules in FolderTool to retrieve custom rules in a specific folder of a profile. Use after confirming both profile ID and folder ID.
  • List External Filters for ProfileTool to list third-party filters for a specific profile. Use when you need to retrieve all external filters and their states after confirming the profile ID.
  • List Known Access IPsTool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.
  • List Services by CategoryTool to list all services within a specific category. Use after confirming a valid category identifier.
  • Modify Custom Rules for ProfileTool to modify existing custom rule(s) for a profile. Use when you need to update rule details such as name, description, severity, or enabled status. Ensure to include the rule ID
  • Modify DeviceTool to modify an existing device. Use when you need to update device settings by providing its ID.
  • Modify OrganizationTool to modify organization settings and limits. Use when you need to change organization limits such as maxusers or maxrouters. Changing these fields is a billable event.
  • Modify Profile FilterTool to modify the enabled state of a specific filter on a profile. Use when you need to enable or disable a particular filter.
  • Modify Service for ProfileTool to modify a specific service rule for a profile. Use when you need to update blocking, bypassing, spoofing, or proxy-redirect settings after reviewing existing rules.
  • Move Profile Rule to FolderTool to move a specific custom rule into a different folder. Use after confirming profileid, ruleid, and folderid.
  • Update Custom Rule by Rule IDTool to update an existing custom rule by its ID. Use when modifying details like name, description, severity, or enabled status for a specific rule.
  • Update External Filters for ProfileTool to update external filters for a specific profile. Use when toggling third-party filters after listing them.
  • Update Profile by IDTool to modify an existing profile by ID. Use when you need to update profile fields after confirming the current profile. Example: Update profile '123abc' with new name and settin
  • Update Profile ScheduleTool to update a specific schedule within a profile. Use when you need to modify schedule details after confirming profileid and scheduleid.
Access, and who is in charge of it

You stay the boss of your Control D account.

Nothing connects until you approve it. You grant access one app at a time, you can take it back the same way, and everything your AI employee does in there is written down where you can see it.

How we handle your data
  • It signs in to your own Control D account. You are not moving anything into ours.
  • You grant access one app at a time, and you can take it back the same way.
  • Everything it does in Control D is written down, with what it did and when.
  • Anything you tell it to check with you first, it checks with you first.
Other apps in the same corner of the business

It works in Control D and the rest of your software in the same job

A real job rarely stays in one place. Reading a message in one app, checking a record in another and writing the result in a third is one request to your AI employee, not three.

See every app

Questions people ask about Control D

Can an AI employee really work inside Control D?
Yes. It signs in to your own Control D account and works in it the way a new hire would, from the chat your team already has open. Nobody installs anything, and nobody learns a new screen.
Do I have to move anything out of Control D?
No. Nothing moves and nothing is replaced. Your records stay in Control D, your team carries on in the same screens they used yesterday, and your AI employee works alongside them in there.
How does it get into my Control D account?
You paste in a key from your own Control D account. It is kept encrypted, and you can withdraw it from inside Control D whenever you like. You approve it before anything connects, and you can take the access back the same way you gave it.
What can it actually do in Control D?
It has 48 ready-made tools in Control D today, among them Bulk Update Profile Filters, Create Custom Rules for Profile and Create Custom Rules in Profile Folder. The full list is on this page. It is not limited to those, but it never has to be taught them.
Can it use Control D and the rest of my software in the same job?
Yes, and that is usually the point. Reading a message in one app, checking a record in Control D and writing the result somewhere else is one request to your AI employee, not three separate ones you stitch together.
Who decides what it is allowed to do in Control D?
You do. You grant access one app at a time and can withdraw it at any time, anything you ask it to check with you first it checks with you first, and everything it does in Control D is written down with what it did and when.