Threat defence for the box office, the kiosks and the foyer WiFi
A cinema runs on ticketing, self-service kiosks, concession tills and card terminals, often sharing one building network with projection and signage. Shield checks each DNS lookup against your policy before a connection starts, so phishing, ransomware and C2 callbacks stop at the lookup. Where you offer customer WiFi in the foyer, it stays family-safe for the matinee crowd and fast because ads are stripped.
What is at stake
Where a cinema network is exposed
Ransomware at the box office
One phishing link opened at the box office can lock ticketing and kiosks on a Friday night. Shield blocks the domains that deliver and control ransomware.Projection and signage on the LAN
Screen management servers, digital signage and building controllers all call out to the internet. An infected one can phone home without anyone noticing.Children in the foyer
Families wait for the film with phones on your WiFi. Without filtering, adult content and malicious ads load under your brand.
How Shield fits
A policy for each network in the building
- Box office and ePOSThreat-first policy for ticketing, kiosks, concession tills and card terminals, with newly registered domains blocked.
- Projection and signageProjection, signage and building systems on their own VLAN, seen device by device through the relay.
- Staff and managersThreat defence on staff WiFi and back-office laptops, with generative AI and file-sharing apps allowed or blocked by group.
- Customer foyer WiFiFamily-safe categories, Safe Search on Google, Bing and YouTube, and ad blocking to keep pages quick.
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
What Shield brings to a cinema estate
- 10 days
- earlier warning of new malicious domains than standard blocklists, from machine learning
- 500%
- faster page loads on customer WiFi with ads and trackers stripped, in Purple's own tests
- IWFfiltering meets the Internet Watch Foundation bar on customer WiFi
- Friendly WiFifiltering meets the Friendly WiFi standard for family-safe public WiFi
FAQ
Questions we hear from teams like yours
Do we need new hardware at each cinema?
No. Point each site's router, firewall or DHCP at Shield and the policy applies straight away. Segmented VLANs for projection or signage use a relay, so each device's internal IP shows in reporting. Nothing needs installing on customers' phones.
Will it slow down ticket sales or the tills?
No. Shield answers the DNS lookup and checks it against your policy before the connection starts, so tills and kiosks connect as normal. On customer WiFi, stripping ads and trackers made pages load up to 500% faster in Purple's own tests.
Can we set different rules per site?
Yes. Set policy per site, network, SSID or VLAN, and by time of day and day of week. You can tighten foyer WiFi for family screenings at one site and leave the rest unchanged, all from one dashboard across the estate.
Does Shield help with PCI DSS?
It helps you meet PCI DSS by blocking malware and phishing domains on the networks that carry card terminals and ePOS, and gives you reports and log streams as evidence. Shield sits behind your firewall as an extra layer. It does not replace the firewall or your payment provider's controls.
What happens if Shield goes down on a busy night?
Shield runs on a dual anycast DNS network and fails closed, so an outage never leaves your networks unfiltered. Head office sees each cinema in one dashboard, with scheduled PDF reports for the operations team.
Other industries
Theatres
Threat defence for box office, show control and bar tills, with family-safe audience WiFi.Music venues
Threat defence for door scanners, cashless bars and production kit, with lighter fan WiFi.Theme parks
Threat defence for gates, queue systems and tills, with family-safe WiFi across the park.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.