Family-safe customer WiFi in each QSR, with the kitchen kept safe
Customers join your WiFi for the few minutes between ordering and eating, often with children beside them. Shield gives that network a family-safe policy and strips ads so pages load faster. Behind it, kitchen display screens, drive-thru tablets, self-order kiosks and digital menu boards run on threat-first rules, set once for the estate and adjusted per restaurant.
- Staff and head officeThreat defense firstOffice LAN and staff WiFi, by directory group
- Guest WiFiStrict, family-safeVisitors and customers, nothing to installGuest network tiersFree WiFiAd blocking on, streaming limited at busy timesPaid WiFiIts own rules, separate from the free tier
- IoT and branchesLocked downTills, cameras and sensors behind a relay
Schedule, per site
What is at stake
Hundreds of sites and thousands of devices
Teenagers after school
Your restaurants fill with under-18s at 4pm, and the customer WiFi has to be safe for them without staff watching screens.Kitchen and drive-thru devices
Kitchen display screens, drive-thru tablets and kiosks run all day, and an infected one calling a C2 server can go unnoticed for weeks.Crew phones and high turnover
New crew join each week with their own phones, and a phishing link on the crew network looks the same as one at home.
How Shield fits
Set once for the estate, adjusted per restaurant
- Customer WiFiFamily-safe categories, Safe Search and ad blocking, with your branded block page.
- Kitchen and drive-thruKitchen display screens and drive-thru tablets on allow lists, with domains registered in the last 7 days blocked.
- Kiosks and menu boardsSelf-order kiosks and digital menu boards behind a relay, so each device's internal IP shows in reports.
- Crew WiFiThreat defense first, with games and social media blocked during shifts.
See everything Shield stopsHospitality WiFi on Purple Access
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleProof
Built for estates, measured on speed
- 80,000+
- venues in 90 countries run WiFi on the Purple platform
- 500%
- faster page loads, once ads and trackers are stripped out
- 10 days
- head start on standard blocklists for new malicious domains
- Friendly WiFistandard met by Shield's filtering for family-safe public WiFi
FAQ
Questions we hear from teams like yours
Do we need hardware at each restaurant?
No. You point each restaurant's router, firewall or DHCP at Shield, with no appliance to ship, and customers install nothing. A relay is optional where kiosks and kitchen screens sit on their own VLANs and you want each device's internal IP in your reports.
Can franchisees have their own rules?
Yes. Set the brand policy once for the estate, then let each site, SSID or VLAN carry its own exceptions. Policies can also change by time of day and day of week, so a late-night drive-thru can run different rules from the breakfast shift.
Will filtering slow down mobile ordering?
No. Shield answers the lookup the ordering app makes anyway, so orders are not held up. With ads and trackers stripped, Purple's own measurements show page loads up to 500% faster and up to 44% less data used on the customer network.
What happens if Shield goes down at lunchtime?
Shield runs on a dual anycast DNS network, so if one node or network fails, the next one answers. It also fails closed, so an outage never leaves your customer WiFi or kitchen devices unfiltered. Your estate stays filtered through the rush.
Can customers bypass the filter with a VPN?
You can block VPN and proxy apps in one click on the customer network. That closes the common route round a family-safe policy, while your crew and managers keep the apps they need on their own SSID.
Other industries
Hotels
Family-safe guest WiFi in each room, with the front desk and building systems on threat-first rules.Restaurants
Family-safe diner WiFi, with pay-at-table terminals and ordering tablets on threat-first rules.Cafés
Faster, family-safe customer WiFi for cafés, with the till and card reader on threat-first rules.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.