Hidden Primary is a managed secondary DNS service for organisations and individuals who want to keep their primary nameserver private while maintaining reliable public DNS. Customers continue managing zones on their own server, which can remain behind a firewall or run on a home connection. Hidden Primary retrieves zone copies using AXFR/IXFR and serves them from public nameservers across Switzerland and Europe, so DNS can remain available even when the primary is offline.

The service supports automatic DNSSEC signing and key management, or serving pre-signed zones, with hourly checks that registrar DS records match. It also provides zone validation, transfer history, query analytics on eligible plans, and nameserver health checks. Users can manage zones through a portal, REST API, or Terraform provider, and can upload zone files instead of operating a primary server. Plans offer different zone limits and features, including team access, signed webhooks, monitoring, and priority support. Hidden Primary offers Professional, Business, and Max subscriptions, with a 14-day free trial, no credit card required, and cancellation available at any time.