Protective DNS for airline crews, offices and lounges
Airline staff work from head office, crew rooms, hubs and airport lounges, on networks your teams run. Shield answers each DNS lookup and blocks phishing, malware and command-and-control callbacks before a connection starts. Crew tablets and electronic flight bags are covered whenever they join a crew room or office network, with nothing to install. Your lounges get family-safe, ad-free WiFi for passengers, managed alongside your offices.
- Anycast node 1
- Anycast node 2Offline
- Anycast node 3
What is at stake
From head office to the crew room
Crew devices in the crew room
Crew tablets and phones join the crew room network between duties. A phishing link opened there reaches the rostering and email accounts they use.Lures dressed as rosters
Fake roster changes, crew schedules and booking alerts are written to fool busy staff. Shield blocks the domain at the lookup, including ones registered days ago.Lounge guests on unknown devices
Lounge WiFi carries premium passengers on devices nobody has checked, close to your own desk and check-in systems.
How Shield fits
Policies for crew, offices, lounges and desks
- Crew tablets and EFBsThreat defense first on crew room and office networks, with allow lists for the apps each fleet relies on.
- Head office and hubsThreat defense, new-domain blocking and generative AI rules per group, through Microsoft Entra ID or Active Directory.
- Lounge WiFiFamily-safe categories, Safe Search and ad blocking for passengers, behind your branded block page.
- Check-in and gate desksThreat-first rules on their own VLAN, with a relay so each terminal shows its own internal IP.
Ads, trackers and bloatware load on every page
Ads and trackers stripped before they load
Proof
Threat defense for every network you run
- 10 days
- earlier warning of new malicious domains than standard blocklists
- 80,000+
- venues on the Purple WiFi platform, across 90 countries
- ISO 27001held by Purple, alongside Cyber Essentials, GDPR and CCPA
FAQ
Questions we hear from teams like yours
Does Shield cover in-flight WiFi?
Shield covers the networks you run on the ground: offices, crew rooms, gates and lounges. Onboard connectivity is usually run by your inflight provider. Shield protects crew tablets and EFBs while they are on your networks. Away from them, they rely on the endpoint protection you already run.
Do crew devices need an app installed?
No. Shield works on the network, so crew tablets and EFBs are covered on any crew room or office network you point at it. Where crew devices sit on their own VLAN, a relay shows each device's internal IP, and allow lists keep each fleet's apps reachable.
Can staff bypass it with a VPN or proxy app?
One-click app blocking covers VPN and proxy apps on your office and crew networks, so traffic cannot route around the policy. Where crews need a sanctioned corporate VPN, add it to the allow list and block the rest.
How does Shield fit with our SIEM and identity provider?
Staff sign in with single sign-on through Okta, Microsoft Entra ID or OIDC. Logs stream to Splunk, Microsoft Sentinel, Elastic, IBM QRadar, CrowdStrike, Amazon S3 or syslog, and the open API connects Shield to your own tooling.
Do we need hardware at each station or lounge?
No. Point the router, firewall or DHCP at each site to Shield and it is covered. Each lounge, office or outstation can carry its own policy by site, SSID or VLAN, and nothing installs on passenger devices.
Other industries
Airports
Threat defense for airport operations and staff, with family-safe passenger WiFi proven at AGS Airports.Trains
Threat defense for rail staff and depots, and onboard WiFi that spends less cellular data on ads.Ferries
Threat defense for ferry crews and port offices, with passenger WiFi that spends less satellite data.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.