Why Tartan

Tartan vs Red Herring: What Changed When Schools Switched

Schools that moved from Red Herring to Tartan App tell us three things changed. Their phishing tests kept running without anyone restarting them, the click rate stopped looking better than it was, and teachers stopped feeling tricked. On Tartan, every person gets a different practice email at a different time.

Free onboarding. Same-day support via email, phone, or video call.

Why Tartan wins

Why Schools Move From Red Herring to Tartan

Districts that ran Red Herring through their county office and then moved to Tartan told us what made the difference.

  • A Click Rate You Can Trust

    Each person gets a different practice email at a random time, so staff can't warn each other. One district that read about 3% on Red Herring saw about 15% on its first Tartan cycles. A few months later, it was down to about 6.4%.

  • Tests That Run Themselves

    Pick a 15, 30, 60, or 90-day cycle once and Tartan keeps sending. New staff are added from Google Workspace or Microsoft 365, and emails usually reach inboxes without allowlisting. One district had paused its quarterly Red Herring tests because each campaign took manual setup.

  • Training Teachers Don't Resent

    Anyone who clicks gets a lesson in under 30 seconds, and staff earn points for catching tests and reporting phish. One district whose teachers didn't want to be "tricked" anymore told us it had no complaints after the switch.

  • Real Phish Removed From Every Inbox

    Staff report suspicious email with one button in Gmail or Outlook. Threat Manager scores each report and can move the email to spam or delete it from every mailbox at once. Red Herring's add-in forwards reports to an admin dashboard, with no removal step in its user guide.

Comparison

Tartan Next to Red Herring

A clear view of where Tartan fits K-12 needs compared with Red Herring.

Built For
TartanOnly K-12: districts, school boards, and independent, charter, and faith-based schools
Red HerringTK-12 staff, first in San Diego County and now across California and other states. "Created for K-12, by K-12 professionals"
Cost
Tartan$191 a year for a district with one school, with unlimited staff. Prices for 1 to 10 schools are public
Red HerringNo price on SDCOE's Red Herring pages; ask SDCOE or your county office
Who Gets Accounts
TartanEvery staff member at each school you buy for
Red HerringLicenses are counted per user, and SDCOE contacts you about any overage
Getting Started
TartanMost schools are set up in under 30 minutes, with free onboarding
Red HerringA memorandum of understanding from your county or district superintendent, then a meeting with the SDCOE Cybersecurity team
Staff List
TartanSynced from Google Workspace or Microsoft 365
Red HerringSynced from Google Workspace, Azure, or Active Directory, or uploaded from a CSV file
Email Delivery
TartanStraight into Google Workspace or Microsoft 365 inboxes; allowlisting usually not needed
Red HerringAllowlisting through your email provider, or a Microsoft Advanced Delivery policy
Phishing Templates
TartanTailored to the services your school uses, with AI-generated templates and adaptive difficulty
Red HerringA library of spear phishing, QR, scam, and credential templates, with lookalike school domains such as infinite-campus.org
Campaign Timing
TartanOne email per person on a 15, 30, 60, or 90-day cycle, at a random time
Red HerringSent to a group at a scheduled time; hourly staggering and mixed templates are campaign settings
After a Click
TartanMicro-training in under 30 seconds that shows how to avoid clicking next time
Red HerringA landing page the admin sets up, where SDCOE suggests a video and an optional quiz; clickers can also get an awareness email
Training Content
Tartan60+ short, school-friendly videos, each ending in a quick quiz
Red HerringAwareness videos on 12 topics, custom quizzes, and training campaigns
Student Training
TartanStudent Phishing & Video Training for every grade, K-12, with a published price per school
Red HerringNot listed on SDCOE's Red Herring pages (as of Nov 2026)
Report Button
TartanTartan App Shield in Gmail and Outlook
Red HerringA report add-in for Gmail and Office 365, added in version 9.0.0
Reported Emails
TartanThreat Manager scores and summarizes each report and can pull the email from every mailbox at once
Red HerringForwarded to a dashboard for admins to investigate; no removal step in Red Herring's user guide (as of Nov 2026)
Risk Score
TartanA phish risk score over time, broken down by school, department, or difficulty
Red HerringRisk score groups and risk history, based on how each person handles simulations
Gamification & Leaderboards
TartanPoints for training, quizzes, simulations, and threat reports, plus a shareable Cybersecurity Leaderboard.
Red HerringNot listed on SDCOE's Red Herring pages (as of Nov 2026)
Google Workspace Security Audit
Tartan100+ automated checks for your Google Workspace configuration every week, plus 30+ guided manual checks, with a prioritized list of findings and recommended remediation steps.
Red HerringNot listed on SDCOE's Red Herring pages (as of Nov 2026)
Breach Notifications
TartanMonitors school email addresses and alerts admins when newly listed breaches affect staff, student, or shared accounts.
Red HerringAn email breach report and a breach exposure dashboard for the users you import

Comparison details can vary based on plan and configuration. Contact us for a tailored assessment.

Texas Cyber Command 2026–2027 State-Certified Cybersecurity Training Program seal

Texas State-Certified Cybersecurity Training

Texas Cyber Command certified Tartan App’s cybersecurity awareness training program for the 2026–2027 program year.

K-12 proof

Real Outcomes from Districts Like Yours

Measured result

Monroe School District staff reported 23 invoice and accounts-payable lures with Tartan App Shield.

Testimonial

"A lack of effective training on phishing attacks and a limited ability to report suspicious emails."

Jesse Crowther, Director of Technology Services, Monroe School District, on what the district faced before Tartan

Contact us

Ready to See Tartan in Action?

Get a personalized walkthrough and see how Tartan fits your district's security awareness goals.

FAQs

Common Questions

Can our county office of education give us Red Herring?

Yes, if it runs Red Herring. SDCOE lets county offices set up sub-accounts for their districts and schools, each with a set number of users. The Los Angeles County Office of Education, for one, publishes a Red Herring setup guide for its districts. Ask your county office how many users your sub-account covers. Tartan prices per school, with unlimited staff for districts and school boards.

Is Red Herring free, and what do schools pay?

SDCOE doesn't publish a price. Its FAQ says there may be an annual subscription fee and a one-time implementation fee. Schools in San Diego County have told us they get it free. Public purchase orders from 2022 to 2026 show other California districts paying from about $280 a year (5 to 9 schools, through their county office) to $2,550 (31 schools), and $8,800 for a 113-school district.

Tartan's phishing simulations cost $116 a year for one school. For $191, that school also gets staff video training and the report button with Threat Manager. Prices for 1 to 10 schools are on our pricing page.

What happens when staff report a real phish in Red Herring?

Red Herring's add-in forwards the email to a dashboard in its admin portal, where admins investigate it. Its user guide lists no step to remove the email from other mailboxes. In Tartan, every report goes to Threat Manager, which can move the email to spam or delete it from every mailbox at once.

Does Red Herring train students?

SDCOE built Red Herring for TK-12 staff, and its pages list no student training (as of Nov 2026). Tartan sells Student Phishing & Video Training for every grade, K-12, with its own price per school.

Who makes Red Herring?

The San Diego County Office of Education. It built Red Herring for TK-12 staff in San Diego County, and schools across California and other states now use it. This page is about that phishing awareness tool. If you came for the figure of speech, that's a different red herring.