Everything Shield stops, everything it speeds up, and how you prove it
One DNS layer filters content, stops threats and strips ads for pages up to 500% faster, across every device on every network you run, with a policy per SSID, VLAN and venue and one dashboard that proves exactly what was stopped. Nothing to install, nothing to rack.
- Up to 500% faster pages, ads stripped
- 241k threats blocked a week at St George's
- Threats flagged up to 10 days earlier
- 30-day free trial
- Filtering to the Internet Watch Foundation bar
Content filtering
You decide what people reach on your WiFi
By category, app or domain, to the bar set by the Internet Watch Foundation and the Friendly WiFi standard. Public and guest WiFi carries a duty of care, and this is where you meet it.
- Block adult, gambling and other categories in a click
- Safe Search enforced on Google, Bing and YouTube
- Allow and block lists per venue
- A branded block page in place of the blocked site
- Limit high-bandwidth streaming at busy times
- Keep competitor sites and apps off your own network
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleThreat defense
Stop the threat before the connection starts
Shield stops the lookup before a connection starts. At St George's Healthcare NHS Trust it blocks around 241,000 threats a week on the guest WiFi. Threats means malware, phishing and command-and-control lookups stopped by Shield.
- Blocks command-and-control callbacks from infected devices
- Blocks known phishing and malware domains at the lookup
- AI detection flags threats up to 10 days before standard blocklists
- Fails closed, across multiple data centers
- Protects every device, including iOS and Windows, with no agent
Blocked at the lookup
- Command-and-control callback
- Phishing domain
- Malware domain
- Newly flagged domain
Ad blocking
Faster pages and less data, on every device
Most security costs you speed. Here, ads, trackers and bloatware never arrive. Pages load up to 500% faster and web traffic drops 20 to 40%, so shared WiFi carries less contention and lower data costs.
Ads, trackers and bloatware load on every page
Ads and trackers stripped before they load
- 500%
- faster page loads
- 44%
- less data used
- 62%
- fewer DNS queries
- 20-40%
- less web traffic across the estate
Policy
A policy per SSID, VLAN and venue
A guest network, a staff network and a children's area never share one set of rules again. Each network and each site carries its own, and each changes by the hour.
- Set per SSID, as a network setting or a DHCP change on your controller
- Separate rules for paid and free WiFi
- Change by time of day and day of week
- Start from a ready-made policy or build your own lists
- OpenStrict, family-safeGuest WiFi through a captive portalOpen network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- SecureThreat defense firstPasspoint and OpenRoaming, staff on EAP-TLS with MDM
- xPSKSafeguarding per groupThings, communities and concessions
Schedule, per venue
Reporting
Prove to anyone who asks exactly what Shield stopped
Blocked URLs, threat analysis and usage at every venue and on every network, with the policy beside them. Change a rule from the same screen.
- Blocked URLs, by network and venue
- Threat analysis, including callbacks stopped
- Network usage beside the policy that shaped it
- Filtering that meets the Friendly WiFi and Internet Watch Foundation standards
Feature questions
Can Shield enforce family-safe browsing?
Yes. It blocks adult, gambling and other content categories, enforces Safe Search on Google, Bing and YouTube, and supports allow and block lists per venue. Filtering meets the bar set by the Friendly WiFi and Internet Watch Foundation standards.
Does ad blocking speed up the network?
Yes, and it is the reverse of what most people expect. Stripping ads and trackers at the DNS layer makes pages load up to 500% faster, cuts web traffic by 20 to 40%, uses up to 44% less data and makes up to 62% fewer DNS queries.
Can I show my own page when a site is blocked?
Yes. Anyone who reaches a blocked site sees your branded block page instead.
Can guests get round it with a VPN or encrypted DNS?
Shield answers every DNS lookup on the network it protects, on every device, with nothing on the device to switch off. A Shield expert shows you exactly how your network handles VPNs and encrypted DNS before you trial.
Decide what your WiFi reaches, free for 30 days
Tell us which networks you run and who is on them. We map a policy to each one: guests, staff, students, residents and paid tiers. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one SSID with your team instead. No hardware, no agents on devices.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneGuests, staff, students, residents and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one SSID planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every SSID you run, from the team that has run content filtering on WiFi since 2012 and runs WiFi for 80,000+ venues in 90 countries.