For schools School network check
A technical assessment tailored to the reality at schools: limited budget, curious users with a lot of time and particularly sensitive data.
- The key questionDoes the separation between the teaching network and the administration network really hold – or only on paper?
- Why it mattersThe administration network holds grades, health data and personnel files. A pupil device must not be able to reach anything there.
- What you have afterwardsA list sorted by effort – what can be fixed immediately at no cost and what needs investment.
School network check
- Testing the network separation between the teaching and administration areas
- Wi-Fi test including guest network and pupil access
- Services reachable from outside: learning platform, webmail, remote access
- Checking admin accounts for default passwords
- Report in plain language, also for non-technical school heads
How it works in practice.
Inventory
Which networks exist, who manages them, which devices are connected where. Often this overview alone is the biggest gain.
Test from outside
What can be reached via the internet – learning platform, webmail, cameras, remote maintenance access.
Test from inside
We plug into a network socket in a classroom and test what can be reached from there.
Report
Sorted by effort: fixable immediately, medium term, investment needed.
The teaching network and the administration network should have nothing to do with each other. Otherwise someone can get from a pupil device to reports, personnel files or school administration.
It is often said that the networks are separate – in reality they are connected by a forgotten cable, a shared printer or a Wi-Fi network that is attached to both. That is exactly what we check.
We don't look at any content: no pupil data, no emails, no grades. We are only interested in whether one can get there – not in what is there.
A list of which routes are open, how serious each one is and what can be closed with existing means. In language that the school forum understands too.
What is included – and what explicitly is not.
Typical scope
One school site with teaching and administration networks and Wi-Fi.
Duration
Two to three test days, report within one week.
Prerequisite
Commission by the school's maintaining body and a contact person for IT – often the system administrator or an external provider.
Not included
No evaluation of pupil activity, no content control, no monitoring of usage behaviour.
The school network check is a technical snapshot. It doesn't replace ongoing patch management – it shows where you stand today.
What people ask beforehand.
The school's maintaining body – depending on the type of school, the municipality, the federal state or the private operator. The head alone is usually not authorised to do so – we clarify this in the preliminary meeting.
No. We work outside lesson times or in rooms that are not in use at the time. Tests that could risk an outage are explicitly agreed beforehand.
That is the norm. We write the report so that an external provider can work through it directly – with concrete steps instead of general recommendations.
More offers for you.
Awareness training for classes
Two lessons from year 5, in the class's language rather than the handbook's – with real cases the pupils know.
School network check
A technical assessment tailored to the reality at schools: limited budget, curious users with a lot of time and particularly sensitive data.
Parents' evening on digital safety
An evening for parents and guardians that is not about bans, but about what actually helps at home.
Training for teachers
In-school training that starts where teachers actually bear responsibility: grades, pupil data and their own staff account.
What can be found publicly about your school
A passive assessment without any risk: we gather what is freely available online about your school – from forgotten logins to data in published files.
What we encounter in assessments, before you encounter it.
Not a product newsletter. We write about attack paths that actually worked against Austrian businesses, authorities and schools – and what helps against them.
- About once a month, not every week
- Concrete attack paths from real assessments
- No tracking pixel, no sharing with advertisers
- Unsubscribe with one click in every email