Threat defence for building systems, residents and amenity WiFi
A build-to-rent building depends on systems residents never see: door access, parcel lockers, lifts, smart thermostats and the on-site team's laptops. Shield blocks phishing, malware and C2 callbacks at the lookup on those networks first, with each device visible by internal IP through the relay. Residents' private networks and amenity WiFi then get protection that reflects your duty of care.
- OpenStrict, family-safeGuest WiFi through a captive portalOpen network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- SecureThreat defence firstPasspoint and OpenRoaming, staff on EAP-TLS with MDM
- xPSKSafeguarding per groupThings, communities and concessions
Schedule, per venue
What is at stake
A building that runs on its network
Access control and IoT
Door entry, parcel lockers, lifts and smart thermostats run firmware that cannot take an agent, and a compromised one can call home.Residents on private networks
Each apartment network carries residents' laptops, games consoles and smart speakers, none of which you manage.Amenity spaces
The lounge, gym and co-working floor see residents, their guests and visitors on shared WiFi through the day.
How Shield fits
A policy for each network in the building
- Building systemsAccess control, lockers and the BMS on an allow list through the relay, each device visible by internal IP.
- Operations teamThreat defence first on concierge and leasing laptops, with phishing and newly registered domains blocked.
- Resident networksThreat blocking on each apartment network, with family-safe categories where a household wants them.
- Amenity WiFiFamily-safe categories, Safe Search and ad blocking in the lounge, gym and co-working space.
See everything Shield stopsBuild to rent WiFi on Purple Access
Proof
Faster shared WiFi, and filtering you can stand behind
- 500%
- faster page loads with ads and trackers blocked, by Purple's own measurement
- 10 days
- earlier warning of new malicious domains than standard blocklists
- IWFfiltering on amenity WiFi meets the Internet Watch Foundation bar
FAQ
Questions we hear from teams like yours
Will residents notice filtering on their own network?
Mostly as speed. Resident networks can run threat blocking only, so phishing, malware and C2 lookups stop while everything else works. Blocking ads and trackers gives up to 500% faster page loads in Purple's own measurements.
Do residents need to install anything?
No. Each apartment network points at Shield through the building's router, firewall or DHCP, so laptops, consoles and smart TVs are covered as soon as they connect. Nothing is installed on residents' devices.
Can access control and building IoT be locked down?
Yes. Point those VLANs at the Shield relay and each device's lookups arrive with its internal IP. An allow list keeps door entry, lockers and the BMS talking only to their suppliers' domains, with new domains blocked.
What do you log about residents?
Shield sees the domains a device looks up, not the content of what is sent. Raw query logs are kept for 9 days. Purple holds ISO 27001, Cyber Essentials, GDPR and CCPA, and your team signs in to Shield through Okta, Entra ID or OIDC single sign-on.
Can each building or apartment have its own policy?
Yes. Policy is set per network, SSID, VLAN and site, so a portfolio can run one standard across its buildings while each apartment, amenity space and building system keeps its own rules.
Other industries
Hotels
Family-safe guest WiFi in each room, with the front desk and building systems on threat-first rules.Restaurants
Family-safe diner WiFi, with pay-at-table terminals and ordering tablets on threat-first rules.Quick-service restaurants
Family-safe customer WiFi, with kitchen screens, kiosks and drive-thru tablets on threat-first rules.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.