Protective DNS for town centre, park and event networks
Councils and business improvement districts run free WiFi across parks, high streets and event sites, alongside staff, CCTV and parking networks. Shield answers each DNS lookup and blocks phishing, malware and command-and-control callbacks before a connection starts. Staff and street systems get threat-first rules. The public network gets family-safe filtering that meets the IWF bar and the Friendly WiFi standard, with nothing to install on visitors' devices.
Ads, trackers and bloatware load on every page
Ads and trackers stripped before they load
What is at stake
Public WiFi in a public place
Harmful content in public
Adult content reached on your WiFi, beside a playground or a bus stop, carries the council's or the BID's name.Street systems on shared links
CCTV, parking sensors and digital signage rarely take an agent. A compromised one can call home without anyone noticing.Event days at full load
A festival or Christmas market puts thousands of phones on the same access points. Ads and trackers take capacity the crowd needs.
How Shield fits
A policy for the public, staff and street systems
- Public WiFiFamily-safe categories, Safe Search and IWF-standard filtering, with ad blocking and a branded block page.
- Event SSIDsTheir own policy for the dates of each event, with ad blocking to free capacity for crowds.
- Council and BID staffThreat defence first on council and BID networks, with users mapped from Microsoft Entra ID or Active Directory.
- CCTV, parking and signageLocked through the relay to the domains each system needs, with geographic and TLD blocking.
- Staff and head officeThreat defence firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
Proof
Public WiFi you can put your name to
- 500%
- faster page loads once ads are blocked, in Purple's own measurements
- IWFbar met by Shield's filtering on public networks
- Friendly WiFistandard met by Shield's family-safe filtering
- Cyber Essentialsand ISO 27001, both held by Purple, the company behind Shield
FAQ
Questions we hear from teams like yours
Does Shield meet the Friendly WiFi standard for public WiFi?
Yes. Shield's filtering meets the Friendly WiFi standard and the Internet Watch Foundation bar. On the public network that means family-safe categories, Safe Search enforced on Google, Bing and YouTube, and a branded block page that tells visitors why a page is unavailable.
How does it help with Cyber Essentials and the CAF?
Shield gives you evidence for both. Threats are blocked at the lookup, dashboards drill from a domain to each device that queried it, and logs stream to Microsoft Sentinel, Splunk or syslog. It helps you meet these frameworks. It does not make you compliant on its own.
Do we need equipment at each site or street?
No. Point the router, firewall or DHCP behind the public network at Shield. Add a relay where CCTV or parking VLANs need each device's internal IP in the reports. Nothing installs on visitors' phones.
Can visitors get round the filter with a VPN?
One-click app blocking covers VPN and proxy apps, so you can stop them on the public network and keep the family-safe policy in force. Staff networks can allow a sanctioned VPN while blocking the rest.
Can each park, street or event have its own rules?
Yes. Set a policy per site, SSID or VLAN, by time of day and day of week. A market square can run stricter rules in the daytime, and an event SSID can carry its own rules for a single weekend.
Other industries
Stadiums
Threat defence for turnstiles, ticketing and staff, with faster fan WiFi in a packed bowl.Country and golf clubs
Threat defence for clubhouse ePOS and tee-sheet systems, with family-safe WiFi for members.Caravan parks
Threat defence for reception and park systems, with family-safe, faster WiFi for holiday guests.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.