Safe, fast shopper WiFi across each store in your estate
Shoppers join your WiFi to check prices, find a size or open a loyalty app, and they expect it to be safe and fast. Shield gives each store's customer network a family-safe policy and strips ads so pages load faster. Behind it, ePOS, handhelds, digital signage and head office run on threat-first rules, set once for the estate and adjusted per store.
Guest WiFi policy
- Adult contentBlocked
- GamblingBlocked
- Safe Search on Google, Bing and YouTubeEnforced
- Streaming at busy timesLimited
Allow list
bookings.examplemenu.exampleBlock list
rival-venue.exampleWhat is at stake
Hundreds of stores and nobody on site to watch
Shopper WiFi in your name
A shopper who reaches harmful content on your WiFi sees it in your store, under your brand.Store devices, central risk
Each ePOS terminal, handheld and signage player is a way in, and one store's infected device can call a C2 server for weeks unseen.Phishing aimed at store managers
Store managers read head office email on shared back-office PCs, and a fake login page looks like any other request.
How Shield fits
One estate policy, with exceptions where stores need them
- Shopper WiFiFamily-safe categories, Safe Search and ad blocking, with a branded block page in your own style.
- ePOS and paymentsThreat-first rules on their own VLAN, with new domains, risky TLDs and C2 callbacks blocked.
- Handhelds and signageStock handhelds and signage players behind a relay, so each device's internal IP shows in reports.
- Head office and laptopsThreat-first rules for head office and area managers' laptops on your network, with Microsoft Entra ID groups setting the rules.
Ads, trackers and bloatware load on every page
Ads and trackers stripped before they load
Proof
Scale, speed and early warning across the estate
- 80,000+
- venues in 90 countries run WiFi on the Purple platform
- 10 days
- head start on standard blocklists for new malicious domains
- 500%
- faster page loads, once ads and trackers are stripped out
- ISO 27001certification held by Purple, alongside Cyber Essentials, GDPR and CCPA
FAQ
Questions we hear from teams like yours
How do we roll Shield out across hundreds of stores?
You point each store's router, firewall or DHCP at Shield, usually through the change process you already run. There is no hardware to ship and nothing for shoppers to install. Policies are set once for the estate, then adjusted per store, SSID or VLAN.
Does Shield help with PCI DSS?
It helps you meet PCI DSS and gives you evidence for it, rather than making you compliant. ePOS networks get their own threat-first policy, and logs stream to your security team's tools. Shield sits behind your firewall as an extra layer, not in place of it.
Will it work with our security stack?
Yes. Shield streams logs to Splunk, Microsoft Sentinel, Elastic, IBM QRadar, CrowdStrike, Amazon S3 or syslog, and has an open API. Admins sign in with Okta, Microsoft Entra ID or OIDC, so access follows your existing joiners and leavers process.
Can we see shadow IT in our stores?
Yes. User behavior analytics show which apps and AI tools staff use on store and head office networks. You can drill down from any domain to each device that looked it up, and send scheduled PDF reports to regional managers each week.
What happens to trading if Shield has an outage?
Shield runs on a dual anycast DNS network, so if one node or network fails, the next one answers. It also fails closed, so an outage never leaves a store's shopper WiFi or ePOS network unfiltered. No store is left open to threats while a fault is fixed.
Other industries
Big-box retail
Family-safe shopper WiFi on the shop floor, with ePOS, scanners and self-checkouts on threat-first rules.High-street retail
Family-safe customer WiFi for independents and chains, with tills and card readers on threat-first rules.Shopping malls
Family-safe public WiFi across the center, with management and building systems on threat-first rules.
Decide what your network reaches, free for 30 days
Tell us which networks and sites you run and who is on them. We map a policy to each one: staff, guests, students, residents and IoT. Then point one network at Shield and see what it stops for 30 days, before you pay anything. Running change control? We plan a pilot on one site with your team instead. No hardware to install.
- We map your networksA Purple expert maps your networks, your venues and the people on each, and answers your questions on bypass, outages, data handling and integrations.
- You get a policy for each oneStaff, guests, students, residents, IoT and paid tiers, each with the policy it needs.
- You prove it, then get your tailored quote30 days free on one network, or a pilot on one site planned with your team, then Shield priced standalone or as an add-on to your Access plan.
Your policy map
Tell us your networks. We map a policy to each one.
A Purple expert comes back with a policy for every network and group you run, from the team that has run content filtering since 2012 and runs WiFi for 80,000+ venues in 90 countries.