Skip to content
Protect a network free
Museums

Threat defence for museum collections, exhibits and school groups

A museum runs a collections database, digitisation workstations, environmental monitoring in its stores, interactive exhibits and a gift shop, often on a public-sector budget. Shield checks each DNS lookup before a connection starts, blocking phishing, ransomware and C2 callbacks. Visitor WiFi comes second, with family-safe filtering for the school groups that fill your galleries on weekdays.

Protect a network free for 30 daysTalk it through with a Shield expert

Watch a lookup get blocked

Protect a network free for 30 days

What is at stake

Where a museum network is exposed

  • Ransomware on the collections

    Years of catalogue records and digitised images sit on one system. Ransomware there takes the archive offline for months.

  • Exhibits nobody owns any more

    Interactive kiosks from past exhibitions stay on the network, unpatched, calling out for content that no longer exists.

  • School groups on visitor WiFi

    Pupils on a trip join your WiFi with their own phones. The filtering they meet should match what their school expects.

How Shield fits

Separate rules for staff, stores, galleries and visitors

  • Curators and office staffThreat defence by Entra ID group, with new-domain and TLD blocking on staff and office networks.
  • Stores and digitisationEnvironmental monitors and digitisation kit on their own VLAN, limited to known domains through the relay.
  • Gallery exhibits and shopInteractive kiosks and shop ePOS on threat-first policy, each device visible in reporting.
  • Visitor and schools WiFiFamily-safe categories, Safe Search on Google, Bing and YouTube, and ad blocking.

See everything Shield stopsVenue WiFi on Purple Access

Proof

What Shield gives a museum

10 days
earlier warning of new malicious domains than standard blocklists
  • IWFfiltering meets the Internet Watch Foundation bar on visitor WiFi
  • Friendly WiFifiltering meets the Friendly WiFi standard for family-safe public WiFi
  • Cyber Essentialsheld by Purple, alongside ISO 27001, GDPR and CCPA

FAQ

Questions we hear from teams like yours

Ask a Shield expert anything else

Does Shield help with Cyber Essentials and the CAF?

It helps you meet Cyber Essentials and the NCSC Cyber Assessment Framework by blocking malware and phishing domains on staff networks and devices, with reports and log streams as evidence. Shield is a layer behind your firewall, not a replacement for it.

Is visitor WiFi safe enough for school visits?

Shield's filtering meets the IWF bar and the Friendly WiFi standard, with Safe Search enforced on Google, Bing and YouTube. You can tighten categories on weekday mornings when school groups visit, by time of day and day of week.

Can we cover outstations and stores on other sites?

Yes. Policy runs per site, network or VLAN from one dashboard. Point each site's router or firewall at Shield, and use the relay for stores where sensors sit on segmented VLANs.

What about staff working from home?

Shield protects devices while they are on your networks, including outstations and stores you point at it. Laptops at home or on a research trip are outside those networks, so they need the endpoint protection you already run. Policy by Entra ID group applies again when staff return.

Will it send our data to another system?

Only if you choose. Shield can stream logs to Splunk, Microsoft Sentinel, Elastic or syslog, or keep reporting in its own dashboards. It sees DNS lookups only, and Purple works to GDPR and holds ISO 27001.

Other industries

Decide what your network reaches, free for 30 days

Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.

Protect a network free for 30 daysOr see Shield in a live demo on purple.ai
  1. We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
  2. You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
  3. You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.

Your policy map

Tell us your networks. We map a policy to each one.

A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.