1. A network regulator comprising at least one hardware processor configured to execute a client boot agent and a network filter connected to the boot agent, wherein: the network filter is configured to regulate data transfer between a plurality of client systems and one or more entities, wherein the plurality of client systems are interconnected by a local network, and wherein the one or more entities are outside the local network; the client boot agent is configured to transmit a hypervisor image to a client system of the plurality of client systems in response to receiving a boot request from the client system, wherein executing the hypervisor image on a processor of the client system causes the client system to launch a hypervisor configured to: expose a client virtual machine (VM) on the client system, the client VM controlled by the hypervisor, and load an operating system into the client VM; and wherein regulating data transfer comprises: employing the network filter to determine whether the hypervisor is in a trusted state according to a hypervisor integrity measurement received from the client system, the hypervisor integrity measurement characterizing the integrity of the hypervisor; in response to determining whether the hypervisor is in the trusted state, when the hypervisor is in the trusted state, employing the network filter to allow electronic communications between the client system and the one or more entities outside the local network, and in response to determining whether the hypervisor is in the trusted state, when the hypervisor is not in the trusted state, employing the network filter to block electronic communications between the client system and the one or more entities outside the local network.