Help your school understand visible security and privacy risks.

This service has been set up by Stuart Dillon-Roberts to give schools a constructive, plain-English review of their public website, privacy signals, public social channels, operational tools and technical risk indicators.

PrivacyChecks for a visible privacy policy and guides a safe Facebook/Instagram review.

Operational ST4SChecks nominated school tools against the supplied NZ-relevant ST4S list.

TechnicalRuns passive public checks for email, website headers, software clues and exposure risks.

Final reportCombines the results into a principal and board-friendly advisory report.

Why is this password protected?

The password limits access so the assessment is used by invited schools and authorised reviewers, not by people looking for weaknesses on school websites. Please use one authorised school website at a time and use the results positively.

Before you start

This assessment reviews publicly accessible information and school-supplied details. It does not log in, bypass access controls, scrape private content, scan social media images, identify people, or determine consent.

Use one authorised school website at a time. Findings should be reviewed with the school’s website provider, IT provider, privacy lead or legal adviser as appropriate.

Admin access