Skip to content
Protect a network free
Integrations

Shield fits the identity, security and IT tools you already run

Sign in with your identity provider, set policy by directory group, stream logs to your SIEM and script the rest through the API. It works with the network and WiFi hardware you already own.

Protect a network free for 30 daysTalk it through with a Shield expert

What Shield connects to

  • Identity and single sign-on

    Sign in to Shield with your identity provider, and map directory groups to policies.

    • Microsoft Entra ID
    • Active Directory
    • Okta
    • OIDC

  • SIEM and log streaming

    Stream every lookup and every block to the tools your security team already watches.

    • Splunk
    • Microsoft Sentinel
    • Elastic
    • IBM QRadar
    • CrowdStrike
    • Amazon S3
    • Syslog

  • Reporting and data

    Scheduled reports, per-user and per-site views, and exports for everything else.

    • Scheduled PDF reports
    • CSV export
    • Per-user reporting
    • Per-site reporting

  • Your network

    Point any router, firewall or DHCP server at Shield, on the WiFi hardware you already own.

    • Cisco Meraki
    • HPE Aruba
    • Ruckus
    • Juniper Mist
    • Ubiquiti UniFi
    • Cambium
    • Extreme
    • Fortinet

  • Automation

    Script bulk changes and trigger SOAR playbooks when Shield blocks a threat.

    • Open API
    • Webhooks
    • Zapier

  • Purple Access

    Running Purple Access? Shield adds a policy to every network it runs.

    • Open networks
    • Secure networks
    • xPSK networks
    See Shield on Purple Access

Integration questions

Ask a Shield expert anything else

Which SIEMs can Shield send logs to?

Shield streams lookup and block logs to Splunk, Microsoft Sentinel, Elastic, IBM QRadar, CrowdStrike and Amazon S3, or to any SIEM that accepts syslog.

Can policy follow our directory groups?

Yes. Map Microsoft Entra ID or Active Directory groups to policies, so each team gets its own categories, apps and lists on your network.

How long are DNS query logs kept?

Raw DNS query logs are kept for 9 days, and Purple pulls the data in every night for its own reporting. To keep raw logs for longer, stream them to Splunk, Microsoft Sentinel, Elastic, IBM QRadar, CrowdStrike, Amazon S3 or syslog, under your own retention policy.

Does Shield work with our WiFi hardware?

Yes. Shield works at the DNS layer, so it runs on any router, firewall or WiFi platform, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet.

Decide what your network reaches, free for 30 days

Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.

Protect a network free for 30 daysOr see Shield in a live demo on purple.ai
  1. We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
  2. You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
  3. You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.

Your policy map

Tell us your networks. We map a policy to each one.

A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.