Back to Breach Tracker
SchoolBreach.org Tools

School Cybersecurity Tools

Free tools to scan, assess, and improve your school's cybersecurity. No sign-up required for free tools — just start using them.

6 Free Tools4 Recommended Tools

Recommended Tools

Third-party cybersecurity tools and services we recommend for schools. These are not Ocean products — we just think they're worth looking into.

Website Protection

Cloudflare

Free website protection with DDoS mitigation, SSL, and a web application firewall — ideal for school websites.

  • DDoS attack protection
  • Free SSL/TLS certificates
  • Web Application Firewall (WAF)
  • Global CDN for faster page loads
  • DNS security
  • Bot management

Cloudflare, Inc.

Free tier available

Password Management

Bitwarden

Open-source password manager for school teams. Store and share credentials securely across staff.

  • Encrypted password vault
  • Secure credential sharing
  • Two-factor authentication support
  • Password generator
  • Cross-platform (browser, mobile, desktop)
  • Self-hosting option for full control

Bitwarden, Inc.

Free for individuals · Teams from $4/user/mo

Security Training

KnowBe4

Security awareness training platform with simulated phishing tests to train school staff against real threats.

  • Simulated phishing campaigns
  • Interactive training modules
  • Compliance training (data privacy, etc.)
  • Risk scoring per user
  • Automated training assignments
  • Reporting dashboard for administrators

KnowBe4, Inc.

Free phishing test available

Email Security

MXToolbox

Comprehensive email security diagnostics — check SPF, DKIM, DMARC, and blacklist status for your school domain.

  • SPF, DKIM & DMARC validation
  • Email blacklist monitoring
  • DNS health check
  • SMTP diagnostics
  • Domain reputation monitoring
  • Delivery issue troubleshooting

MXToolbox, Inc.

Free lookups available

Cybersecurity Is Asymmetric

This is why school cybersecurity is so hard — and why it matters so much.

ATTACK

  • One target at a time
  • Find one weak point
  • One win is enough

Attackers need ONE win

DEFENCE

  • Many targets at once
  • Everything must hold
  • One miss is enough

Defenders need EVERY win

That's the imbalance. Schools must defend every system, every account, every device — all the time. An attacker only needs to find one gap. This is why proactive security isn't optional.

Learn More About School Cybersecurity

Read our free guides, checklists, and templates to build a stronger security culture at your school.

Browse Guides & Resources