Protect care records on staff tablets and keep residents' WiFi safe
Your carers record each visit on tablets and phones, and those care records are what an attacker wants. Shield blocks phishing, malware and ransomware domains at the DNS lookup, before a connection starts. Residents and their families get a separate, family-safe WiFi network, and you get reports that give you evidence for the DSPT and for CQC inspections.
What is at stake
Care records on shared tablets, and residents online
Phishing on care staff
Carers share tablets across shifts and rarely get security training. One fake login page can expose the digital care records system.Residents targeted by scams
Residents video-call family and browse on the home's WiFi. Scam and phishing sites aimed at older people reach them there too.Connected devices in the home
Nurse call, door entry and resident sensors share the building network, and few homes can see what those devices look up.
How Shield fits
Staff, residents and building systems kept apart
- Care staff devicesThreat-first policy on tablets and phones on the staff network, with users mapped from Entra ID or Active Directory.
- Resident and family WiFiThreat defense, family-safe categories and Safe Search, with ads and trackers stripped to keep browsing quick.
- Nurse call and sensorsBuilding systems on their own VLAN, with a relay showing each device's internal IP.
- Across your groupOne policy for each home in your group, or a different one per site, from a single dashboard.
- Staff and head officeThreat defense firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
Proof
Standards to show inspectors and families
- 10 days
- earlier warning of new malicious domains than standard blocklists
- Cyber Essentialscertified, alongside ISO 27001, GDPR and CCPA
- Friendly WiFistandard met for family-safe filtering on resident WiFi
- IWFfiltering meets the bar set by the Internet Watch Foundation
FAQ
Questions we hear from teams like yours
Does Shield help us with the DSPT and CQC?
It gives you evidence for both. Shield blocks malicious lookups on staff devices and networks, and scheduled PDF reports show what it stopped. That supports your DSPT submission on protecting systems, and helps you show CQC how you keep residents' information safe.
Do we need an IT team to run it?
No. You point your router at Shield, with no hardware to buy, and set the policy in a dashboard. Start with one policy for staff and one for residents, and scheduled PDF reports show what was blocked.
Will it stop residents video-calling their families?
No. You choose which of the 40+ content categories to block, and an allow list keeps any app or site a resident relies on reachable, including the video-calling services families use.
What if a carer's tablet leaves the building?
Shield protects a tablet while it is on your home's networks, with nothing to install on it. Away from them, it needs the endpoint protection you already run. When the carer is back on site, your policy applies again at the next lookup.
Does a group with several homes need hardware at each site?
No. Each home points its router or DHCP at Shield. You can apply one policy across the group or one per home, and reports show threats blocked home by home.
Other industries
Healthcare
Threat defense on clinical, staff and medical IoT networks, and on guest WiFi as at St George's Healthcare NHS Trust.Dental and GP practices
Threat defense for reception and surgery PCs, family-safe waiting-room WiFi, and evidence for the DSPT.Central government
Threat defense for departmental estates, agencies and remote officials, with evidence for Cyber Essentials and the CAF.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.