Protect your clinical systems and keep waiting-room WiFi safe
A small practice holds the same kind of patient records as a hospital, usually with no security team to guard them. Shield blocks phishing, malware and ransomware domains at the DNS lookup on reception and surgery PCs. Patients in the waiting room get their own family-safe WiFi, and you get reports that give you evidence for your DSPT submission.
What is at stake
Patient records with no security team behind them
Phishing at reception
Reception staff open emails from patients, suppliers and labs all day. One fake invoice or login page can let ransomware into the clinical system.Imaging and practice kit
Intraoral cameras, X-ray PCs and card terminals sit on the same small network, often running software nobody updates.Patients on your WiFi
Patients' phones in the waiting room are unknown devices. Without a separate policy, they share a network with your clinical systems.
How Shield fits
Surgery, reception and waiting room on separate policies
- Clinical and admin PCsThreat-first policy with new-domain rules that block domains registered in the last 7 or 30 days.
- Imaging and equipmentX-ray PCs and practice kit on their own VLAN, with an allow list limiting them to the vendors they need.
- Waiting-room WiFiThreat defense, family-safe categories and Safe Search for patients, with nothing for them to install.
- Practice laptopsLaptops on the practice network get threat defense and app blocking, with nothing to install on them.
See everything Shield stopsCare and health WiFi on Purple Access
- Staff and head officeThreat defense firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
Proof
Standards and certifications behind your practice
- 10 days
- earlier warning of new malicious domains than standard blocklists
- Cyber Essentialscertified, alongside ISO 27001, GDPR and CCPA
- Friendly WiFistandard met for family-safe filtering on waiting-room WiFi
- IWFfiltering meets the bar set by the Internet Watch Foundation
FAQ
Questions we hear from teams like yours
We have no IT team. Can we run it?
Yes. You or your IT support provider point the practice router at Shield, with no hardware to buy. Policy is set in a dashboard, with nothing to install on practice PCs, and scheduled PDF reports show what Shield blocked.
Does it help with the DSPT?
It gives you evidence for it. Reports show the malicious lookups Shield blocked across practice PCs and networks, which supports what the toolkit asks about protecting systems from cyber threats. Purple also holds Cyber Essentials and ISO 27001.
Will it slow down our clinical system?
No. Shield answers DNS lookups only, so it never sits between your PCs and the clinical system once a connection starts. Blocking ads and trackers also cuts DNS queries by up to 62%, in Purple's own measurements.
Can patients on the waiting-room WiFi get round it?
Patients join a separate network with its own policy. Shield answers each lookup on that network, can block VPN and proxy apps with one click, and needs nothing installed on a patient's phone.
We have several practices. Can each have its own rules?
Yes. Shield applies a policy per site, network or VLAN, so a dental group or primary care network can share one policy or set rules per practice, with reporting for each site from one dashboard.
Other industries
Healthcare
Threat defense on clinical, staff and medical IoT networks, and on guest WiFi as at St George's Healthcare NHS Trust.Care homes
Threat defense for carers' tablets and care records, with family-safe WiFi for residents and visiting families.Central government
Threat defense for departmental estates, agencies and remote officials, with evidence for Cyber Essentials and the CAF.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.