Family-safe diner WiFi, with tills and tablets kept safe behind it
Diners join your WiFi to check the menu, split the bill and keep the children busy until the food arrives. Shield answers each lookup on that network with a family-safe policy and strips ads so pages load faster. Behind it, pay-at-table terminals, ordering tablets and the manager's office run on threat-first rules that stop phishing and malware before a connection starts.
- Staff and head officeThreat defence firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
What is at stake
Diners, staff and tills on one line
Children at the table
A tablet handed to a child at dinner reaches whatever your WiFi allows, in full view of the next table.Supplier invoice phishing
The manager opens supplier invoices and booking alerts on the office PC, which makes it the obvious target for a fake login page.Ordering devices online all day
Server handhelds and kitchen printers stay online through each service, and an infected device calling home can sit on your network unseen.
How Shield fits
Front of house and back of house, kept apart
- Diner WiFiFamily-safe categories, Safe Search on Google, Bing and YouTube, and ad blocking for faster pages.
- Pay-at-table and tillsThreat-first rules on their own VLAN, with newly registered domains and C2 callbacks blocked.
- Server handheldsOrdering and reservations apps allowed, with social media and games blocked during service hours.
- Manager's officePhishing, malware and ransomware blocked, with drill-down from any blocked domain to the device that asked.
See everything Shield stopsHospitality WiFi on Purple Access
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
Faster diner WiFi, by Purple's own measurements
- 500%
- faster page loads, once ads and trackers are stripped out
- 62%
- fewer DNS queries, once ads and trackers are blocked
- Friendly WiFistandard met by Shield's filtering for family-safe public WiFi
- ISO 27001certification held by Purple, alongside Cyber Essentials, GDPR and CCPA
FAQ
Questions we hear from teams like yours
Will the WiFi feel slower with filtering on?
It should feel faster. Shield strips ads and trackers at the lookup, so phones download less. Purple's own measurements show page loads up to 500% faster and up to 62% fewer DNS queries, which matters on a busy Friday with all the tables online.
Do we need a technician at each restaurant?
No. Shield is a DNS change on the router, firewall or DHCP you already have, with no hardware to install, and diners install nothing. Most groups roll it out remotely, one site at a time, from a single dashboard.
What happens if Shield has an outage during service?
Shield runs on a dual anycast DNS network, so if one node or network fails, the next one answers. It also fails closed, so an outage never leaves your diner WiFi or your tills unfiltered. Your card terminals are never left exposed mid-service.
Does it help with PCI DSS for our card terminals?
It helps you meet PCI DSS rather than making you compliant. Card terminals sit on their own policy that blocks phishing, malware and C2 lookups, and logs stream to your SIEM or syslog as evidence. It works alongside your firewall and payment provider.
Can we block streaming on the staff network but not for diners?
Yes. Each SSID, VLAN and site gets its own policy, and you can change it by time of day. Many restaurants block games and social media on staff devices during service, and leave the diner network family-safe but open.
Other industries
Hotels
Family-safe guest WiFi in each room, with the front desk and building systems on threat-first rules.Quick-service restaurants
Family-safe customer WiFi, with kitchen screens, kiosks and drive-thru tablets on threat-first rules.Cafés
Faster, family-safe customer WiFi for cafés, with the till and card reader on threat-first rules.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.