How much manual work is required after setup?
Guided onboarding helps your team get configured, then campaigns can run on an automatic 15, 30, 60, or 90-day cadence. Most teams focus on reviewing results and taking targeted follow-up actions.
Platform
One K-12 Platform for Email Security and Cybersecurity Awareness
Phishing simulations, video training, Tartan App Shield, Threat Manager, leaderboards, Google Workspace audits, and breach notifications in one place for school IT teams. See every feature in action below.
Trusted by 1,000+ Schools Globally
PRODUCT WALKTHROUGH
See the Whole Platform in About a Minute
PRODUCTS
Everything in One Platform
- Phishing SimulationsRealistic, school-specific phishing tests for staff and students that run on their own.
- Video TrainingShort, positive cybersecurity videos for staff and students, assigned and tracked for you.
- Tartan App Shield (Phish Report Button)One click in Gmail or Outlook sends a suspicious email to your IT team.
- Threat ManagerEvery reported email explained, and threats removed from every inbox.
- Gamification & LeaderboardsPoints and leaderboards that reward reporting and training.
- Google Workspace AuditWeekly read-only checks of your Google Workspace settings, with step-by-step fixes.
- Breach NotificationsAlerts as soon as a staff, student, or shared school account appears in a data breach.
- Reporting & AnalyticsPhish risk, training completion, and reporting trends ready for leadership.
- Directory Sync & PlatformGoogle Workspace and Microsoft 365 sync, onboarding, and support built in.
Phishing Simulations
Realistic, school-specific phishing tests for staff and students that run on their own.
Templates From the Tools Schools Use
Templates for 110+ services your staff use every day, like PowerSchool, Skyward, Genesis SIS, i-Ready, and Google Classroom.
Lands in the Inbox Like the Real Thing
Simulations arrive in Gmail and Outlook looking exactly like the vendor emails staff trust, so practice matches real attacks.
Superintendent and Staff Impersonation
Rehearse emails that appear to come from a real colleague or leader, with their name and signature, at easy, medium, or high difficulty.
Adaptive Campaigns That Run Themselves
Each person gets a different AI-tailored scenario at a different time, and difficulty adjusts after a click, all year long.
Fake Login Page Tests
See who tries to sign in on a realistic fake login page, without storing anything they typed. QR-code lures are included too.
Training on the Exact Email They Clicked
After a click, staff see a copy of the email they were sent, with 2 to 4 numbered clues showing what gave it away.
Student-Safe Simulations
Age-appropriate simulations for students on their own schedule, separate from staff.
Direct Inbox Delivery
Deliver simulations straight to Google Workspace or Microsoft 365 inboxes, or use Microsoft advanced delivery or domain allowlisting.
Video Training
Short, positive cybersecurity videos for staff and students, assigned and tracked for you.
Short K-12 Video Library
Search and filter short videos for staff and students by topic, with captions built in.
Automated Training Campaigns
Onboarding and reinforcement campaigns enroll new staff and recent phishing clickers automatically.
Rule-Based Audiences
Target training by school, department, title, or click history, and watch the audience update as you build it.
No-Login Videos With Quizzes
Staff open a link, watch a short video, and answer a quick quiz, with no account or password to remember.
Completion Tracking and Reminders
See who has finished, review quiz results by video, and resend to everyone incomplete in one click.
Tartan App Shield (Phish Report Button)
One click in Gmail or Outlook sends a suspicious email to your IT team.
One-Click Reporting in Gmail and Outlook
Staff report a suspicious email from the Tartan App Shield sidebar without forwarding anything or opening a ticket.
Reporters Hear Back
Staff get an email telling them whether the message was safe or a threat and what IT did about it.
Threat Manager
Every reported email explained, and threats removed from every inbox.
AI Summary and Risk Score
Every report gets a risk score and a plain-language explanation of why it is or is not a threat.
Instant Admin Alerts
IT gets an email as soon as staff report something, with the risk score and a link straight to the case.
Remove From Every Inbox
Move a threat to spam or delete it from every mailbox at once, including everything from that sender or domain.
Automatic Threat Response
Set report-count and risk-score criteria once, and matching reports are moved to spam for everyone before IT even looks.
Undo Spam Moves
Restore mail moved to spam from the actions log if a report turns out to be safe.
Gamification & Leaderboards
Points and leaderboards that reward reporting and training.
Leaderboards by School and Department
Points for reporting phish, finishing training, and acing quizzes, ranked by person, school, or department.
Leaderboard Update Emails
Send recurring leaderboard updates to all staff or chosen departments to keep momentum going.
Google Workspace Audit
Weekly read-only checks of your Google Workspace settings, with step-by-step fixes.
100+ Read-Only Checks
Check Gmail, Drive, Classroom, Meet, devices, and more without changing a single setting, with clear results for every check.
Filter by Service and Severity
See what passed, what is not met, and what needs manual review, filtered by service and severity.
Step-by-Step Fixes
Each finding explains what is wrong and the exact Admin console steps to fix it.
Enhanced Coverage and CSV Export
Turn on enhanced coverage to verify more checks automatically, and export findings for your records.
Breach Notifications
Alerts as soon as a staff, student, or shared school account appears in a data breach.
Every School Address Monitored
We watch your whole domain and email you when staff, student, or shared accounts appear in a new breach.
Recommended Actions and Review
See what was exposed in each breach, follow the recommended steps, and mark each account reviewed.
Filters and CSV Export
Filter by review status and export exposures to share with leadership or your auditor.
Reporting & Analytics
Phish risk, training completion, and reporting trends ready for leadership.
Phish Risk Score and Trends
Track your phish risk score over time and break it down by school, department, or difficulty.
See Who Reports, Not Just Who Clicks
Recognize the staff who catch and report simulations, not only the ones who click.
Exports and Summary Emails
Export results to CSV and get regular summary emails ready to share with leadership.
Directory Sync & Platform
Google Workspace and Microsoft 365 sync, onboarding, and support built in.
Automatic Department Matching
Messy titles and departments are cleaned up automatically so reports and targeting just work.
Built-In Help and Free Onboarding
Step-by-step guides, a product changelog, and real people who answer in a median of 13 minutes.
FAQs
Platform FAQs
Can we roll out to staff first and add students later?
Yes. Many schools start with staff phishing simulations and training, then add student simulations or student video training when they are ready.
What can IT do with reported suspicious emails?
The Tartan App Shield Phish Report Button routes suspicious emails into Threat Manager, where IT can take one-click action across a single message, every message from the sender, or every message from the sender domain across the school or district. Actions include moving emails to spam and permanently deleting emails where permissions allow.
How does Tartan App approach training?
Tartan App is designed around short learning moments, positive reinforcement, and practical follow-up.
Luke Bergeron
IT Director, SAU #13 School District
Customer perspective
"The platform keeps our staff consistently aware of the latest phishing threats and provides immediate education on how to confidently identify and report them, effectively turning our staff into a human firewall."Read the SAU #13 case study
Ready to see the platform in your school or district context?
We will walk through your environment, priorities, and rollout goals in a live product demo.
Contact Us