Skip to content
Protect a network free
Guest WiFi

Family-safe guest WiFi that loads faster and protects your brand

Guests judge your venue by the WiFi, and by anything that appears on it under your name. Shield filters guest and public WiFi at the DNS lookup, to the IWF and Friendly WiFi standards, with Safe Search enforced and ads stripped out so pages load faster. Nothing installs on guest devices, and it works with any WiFi or with Purple Access.

Protect a network free for 30 daysTalk it through with a Shield expert

Watch a lookup get blocked

Protect a network free for 30 days

What is at stake

Your name is on the network

  • Harmful content under your brand

    A child in the lobby or a passenger at the gate sees something they should not. On your WiFi, it reads as your venue's choice.

  • Infected guest devices

    Guests bring phones and laptops nobody has checked. Shield blocks malware, phishing and C2 lookups, so one device cannot use your network to call home.

  • Slow WiFi at busy times

    Ads and trackers eat bandwidth when the venue is full. Blocking them cuts web traffic by 20 to 40%, so the connection feels faster.

How Shield fits

Policy by SSID, venue and tier

  • Free guest WiFiFamily-safe categories, Safe Search on Google, Bing and YouTube, ad blocking and threat defence, behind your branded block page.
  • Paid or premium tierA lighter content policy for paying guests on their own SSID or VLAN, with threat defence kept on.
  • Venue by venueEach hotel, store or terminal takes the group policy or its own rules, by time of day and day of week.
  • Staff and back officeA separate threat-first policy for staff WiFi, tills and IoT, kept apart from guest traffic.

See everything Shield stopsSee Shield on Purple Access

Proof

Trusted on guest WiFi at hotels and airports

500%
faster page loads with ads and trackers blocked, on Purple's own measurements
  • Whitbreadprotects its hotel guest WiFi with Shield
  • AGS Airportsprotects passengers at Aberdeen, Glasgow and Southampton with Shield
  • IWFfiltering standard met by Shield, alongside the Friendly WiFi standard

FAQ

Questions we hear from teams like yours

Ask a Shield expert anything else

Do guests need to install anything?

No. Shield filters at the network, through your router, firewall or DHCP, so phones, tablets and laptops are covered as soon as they join. There is nothing to install on guest devices and no change to how guests connect.

Does it work with our current WiFi?

Yes. Shield works with any WiFi network, because it only needs your DNS pointed at it, with no hardware to fit. It also adds on to Purple Access, so you can run guest WiFi, the captive portal and filtering from one platform.

Can guests get round the filter with a VPN?

One-click app blocking covers VPN and proxy apps, and new-domain rules catch the freshly registered domains that bypass services rotate through. Safe Search stays enforced on Google, Bing and YouTube, whichever browser the guest opens.

Will filtering block things guests need?

You set the categories per SSID and per venue, and add allow lists for anything a category catches by mistake. A blocked lookup shows your branded block page, so guests see your venue's message rather than a browser error.

Can paid and free tiers have different rules?

Yes. Give each tier its own SSID or VLAN and its own policy. A free tier can stay family-safe with ads blocked, while a paid tier relaxes content rules. Threat defence stays on for both, and schedules can change rules by time of day.

Other use cases

  • Offices and branches

    Threat defence for head office and branch networks, wired and wireless, under one policy.

    See the use case

  • School web filtering

    Filtering for schools and colleges that helps you meet KCSIE, the DfE standards and CIPA.

    See the use case

  • IoT and OT

    Threat defence and allow lists for cameras, tills, sensors and plant equipment that cannot run an agent.

    See the use case

Decide what your network reaches, free for 30 days

Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.

Protect a network free for 30 daysOr see Shield in a live demo on purple.ai
  1. We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
  2. You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
  3. You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.

Your policy map

Tell us your networks. We map a policy to each one.

A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.