Family-safe, faster hotel WiFi in each guest room and lobby
Your guests treat the hotel WiFi as their home broadband for the night, on phones, laptops and the room TV. Shield checks each lookup against your policy before a connection starts. Guest rooms get family-safe filtering with ads stripped for faster pages, while reception, back office and building systems run on threat-first rules. Whitbread protects its hotel guest WiFi with Shield.
- Staff and head officeThreat defense firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
What is at stake
A guest network you share with new strangers each night
Children in family rooms
Guests hand tablets to children in the room, and anything reachable on your WiFi is reachable under your roof.The evening bandwidth crunch
At 9pm half the rooms are streaming, and ads and trackers take a share of the line that guests notice.Phishing at the front desk
Reception and reservations staff open booking emails and supplier invoices all day, so one fake login page puts the property management system at risk.
How Shield fits
Each hotel network gets its own policy
- Guest rooms and lobbyFamily-safe categories, Safe Search and ad blocking, with your branded block page in place of anything blocked.
- Conference and eventsA lighter content policy for business guests on their own SSID, still blocking phishing, malware and C2 callbacks.
- Front desk and back officeThreat-first rules for reception PCs and card terminals, with domains registered in the last 30 days blocked.
- Building systems and IoTDoor lock controllers, room TVs and building controls behind a relay, so each device's internal IP shows in reports.
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
Proven on hotel guest WiFi at Whitbread
- 500%
- faster page loads, once ads and trackers are stripped out
- 44%
- less data used, by Purple's own measurements
- Whitbreadprotects its hotel guest WiFi with Shield
- Friendly WiFistandard met by Shield's filtering for family-safe public WiFi
FAQ
Questions we hear from teams like yours
Can guests get round the filter with a VPN?
You can block VPN and proxy apps in one click. Business guests often need their corporate VPN, so many hotels allow VPNs on the conference SSID and block them on the family network. The choice sits with you, per SSID and per hotel.
Will filtering slow down the room WiFi?
No. Shield answers the DNS lookup a device makes anyway, then strips ads and trackers before they load. Purple's own measurements show page loads up to 500% faster and up to 44% less data used, which helps most when the whole hotel is streaming.
Do we need hardware in each hotel?
No. You point each hotel's router, firewall or DHCP at Shield, with no appliance to install, and guests install nothing. A relay is available where building systems sit on their own VLANs and you want each device's internal IP in the reports.
How does Shield help with PCI DSS at reception?
Card terminals and front desk PCs get their own threat-first policy, Shield blocks phishing and malware lookups, and logs stream to Splunk, Microsoft Sentinel or syslog. That gives you evidence for PCI DSS. It helps you meet the standard alongside your firewall and payment provider, not in place of them.
Can we run different rules across a group of hotels?
Yes. Set a group policy once, then adjust it per site, SSID or VLAN, and by time of day. A family resort can run stricter rules than a city-center business hotel, and single sign-on through Okta or Microsoft Entra ID keeps admin access under control.
Other industries
Restaurants
Family-safe diner WiFi, with pay-at-table terminals and ordering tablets on threat-first rules.Quick-service restaurants
Family-safe customer WiFi, with kitchen screens, kiosks and drive-thru tablets on threat-first rules.Cafés
Faster, family-safe customer WiFi for cafés, with the till and card reader on threat-first rules.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.