Protective DNS for visitor attractions with small IT teams
Aquariums, historic houses, towers and heritage sites run timed-entry booking, gate scanners, shop and café tills and a membership database, often with one person looking after IT. Shield blocks phishing, malware and C2 callbacks at the DNS lookup, with nothing to install on the network. Where you offer visitor WiFi, it stays family-safe for school trips and quick because ads are stripped.
What is at stake
Where an attraction network is exposed
Ransomware on booking and gates
Timed-entry booking and gate scanners are how you take money and let people in. Losing them on a summer Saturday closes the doors.Member and donor data
Membership and Gift Aid records sit in one database. A phished login there is a data breach to report.Interactive exhibits
Touchscreens, projection and audio guides connect out for content and updates, often installed by a contractor and then forgotten.
How Shield fits
Separate rules for staff, tills, exhibits and visitors
- Booking, gates and tillsThreat-first policy for booking, gate scanners, shop and café ePOS and card terminals, with new domains blocked.
- Staff and volunteersThreat defense on office and volunteer devices on your network, with nothing to install on them.
- Exhibits and IoTInteractive exhibits and sensors on their own VLAN, limited to the domains they need, visible through the relay.
- Visitor WiFiFamily-safe categories, Safe Search and ad blocking, so school groups and families browse safely.
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
What Shield gives an attraction
- 10 days
- earlier warning of new phishing and malware domains than standard blocklists
- 500%
- faster page loads on visitor WiFi with ads stripped, in Purple's own tests
- IWFfiltering meets the Internet Watch Foundation bar on visitor WiFi
- Cyber Essentialsheld by Purple, alongside ISO 27001, GDPR and CCPA
FAQ
Questions we hear from teams like yours
We have no IT team. Can we run this?
Yes. Point your router, firewall or DHCP at Shield, with no hardware to install, and pick a policy for each network. Scheduled PDF reports land in your inbox, so you can see what was blocked without logging in each week.
Does it help with Cyber Essentials?
It helps you meet Cyber Essentials by blocking malware and phishing domains on staff networks and the devices that use them, and gives you reports as evidence. Shield is a layer behind your firewall and does not replace it or your other controls.
How does Shield protect our membership data?
Shield blocks the phishing domains that steal logins to your membership and booking systems, including domains registered in the last 7 or 30 days. It sees DNS lookups only, and Purple holds ISO 27001 and works to GDPR.
Can we cover several sites from one account?
Yes. Policy can be set per site, venue, network or VLAN, and by time of day. A trust running several properties sees them in one dashboard, with drill-down from a domain to each device that looked it up.
What if Shield has an outage?
Shield runs on a dual anycast DNS network and fails closed, so an outage never leaves your booking, tills or visitor WiFi unfiltered. You do not need to switch anything back on.
Other industries
Cinemas
Threat defense for ticketing, kiosks and concession tills, with family-safe WiFi in the foyer.Theaters
Threat defense for box office, show control and bar tills, with family-safe audience WiFi.Music venues
Threat defense for door scanners, cashless bars and production kit, with lighter fan WiFi.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.