Products/Shield OnPremise
Shield OnPremise Network Protection

Meet your always-on threat analyst.

Shield gives enterprise and mid-market security teams a prevention-first network defense. Shield blocks malicious traffic at the network layer using the Global Threat Engine and 8.5 billion IP and DNS combinations refined since 2001.

Know More. Miss Less.

Hardware appliance behind your firewall. Powered by the Global Threat Engine. Monitors traffic bidirectionally in real-time. Trusted IPs are permitted. Malicious connections are blocked, without generating alerts. 10 Gbps throughput, sub-millisecond decision latency, no human in the loop.

At a Glance
ProductShield OnPremise
DeploymentInline at network edge, data center, or branch
ProtectsDNS, TCP, UDP, and IP flows across all routed segments
ModeObserve or Protect
Best fitOrganizations needing network-level prevention without agents on every device
Next stepTalk to an Engineer
Book A Demo See How It Works
There's malware in your network.

We help expose it.

Powered by the Global Threat Engine, Shield OnPremise sits behind your firewall. Trusted IP connections are permitted. Malicious connections are blocked. Security teams love it.

01
See all inbound and outbound blocks.
Real-time list of all blocked connections. Drill down on any connection to see why it was blocked, the risk level, the source.
02
Find out where connections are coming from.
Interactive map shows what countries your business is communicating with the most. Investigate concentrations of risk geographically.
03
Identify the top offending devices.
Quickly see which devices have the most malicious connection attempts. Prioritize remediation on the systems that need it most.
Less reacting. More protecting.

Six things Shield OnPremise does differently.

Capability
See every connection.
If an IP is trying to connect, you'll see it. Shield monitors traffic bidirectionally in real-time, giving you full visibility of every connection on your network.
Capability
Know the good from the bad.
Stop guessing which connections are actual threats. Informed by decades of historical IP records and reputation in the Global Threat Engine, Shield instantly identifies malicious or unknown connections.
Capability
Protect your network and your team.
Reduce burnout and alert fatigue with autonomous real-time monitoring and 24/7 protection. Shield blocks malicious connections and enables your team to methodically prioritize threat resolution, without generating alerts.
Capability
Increase protection from Zero Days.
Most companies don't have enough historical data to classify connections as good or bad. Shield gives you the historical data you need to identify and block potentially malicious connections without impeding the good ones.
Capability
Strengthen your existing systems.
Shield seamlessly integrates into your existing environment and takes the burden off your technology, SOC, and IT teams. Over time, Shield can take the place of other products allowing you to consolidate your tech stack.
Capability
Fits where firewalls, NDR, and IDS/IPS don't.
Shield OnPremise sounds a lot like other solutions, but it doesn't fit neatly in a box. It's a complementary control that closes the gap firewalls, NDR, and IDS/IPS leave open.
What customers are saying

Operators who run Shield behind their firewall.

“Great experience. I feel every engineering products and services organization should have Shield as part of their solution package for cybersecurity.”

Richard Rochow · President, NovaTech

“The best attribute of Shield is seeing what is going on inside your network.”

Anson Elliott · IT Manager, AM Liner

Where Shield OnPremise fits

Pick your vertical context.

Shield OnPremise is the right deployment when you need a hardware appliance behind your firewall. Each vertical has its own buying motion and its own evidence requirements.

Healthcare
For Hospitals
Behind the firewall, in front of the IoMT. No agent on clinical equipment. Carrier-ready evidence in two weeks.
Critical Infra
For OT-Adjacent
At the IT-OT boundary. No agent inside SCADA. Defensible report mapped to the CISA advisory.
SLED
For Districts & Counties
SLCGP-aligned. Coexists with what previous boards approved. Board-ready report on a one-year term.
Manufacturing
For Plant Networks
10 Gbps at the IT-OT boundary. No agent on plant equipment. Customer-ready evidence package.
Last step
Get a clear
yes or no.
Book the demo.

30-minute discovery call. No deck, no detour. We show you what Shield would block in your environment and answer the questions your stack hasn't.

Book A Demo
Block!

RECOMMENDED NEXT STEP

Ready to see what Shield finds in your environment?

Request a POV Book a Meeting Talk to an Engineer