For schools, parishes, nonprofits & faith-based organizations
Phishing protection
built for organizations.
One platform for the four things every IT admin loses sleep over: phishing simulation, security training, password hygiene, and dark-web breach monitoring. Without the enterprise price tag. We use a school as the running example below — same product, same price for any organization.
14-day free trial · No credit card required · 20-staff minimum · 1-year plan
FERPA-compliant·SDPC NDPA signatory·NCEA partner·BBB A+ rated
Everything in one subscription
What your organization gets
Eight tools that work together — instead of buying KnowBe4 + 1Password + a separate breach monitor + a separate phishing trainer, you get one platform with one bill.
🎯
Realistic phishing simulations
Catholic-school-themed scenarios (pastor gift card requests, diocesan compliance traps, payroll spoofs) that staff actually fall for the first few times. AI-generated variants keep them fresh.
📚
In-context training
The teacher who clicked the simulation gets the lesson 30 seconds later. No mandatory annual 45-minute video — short, just-in-time training that actually sticks.
🛡️
Browser extension
Real-time trust badges on every email in Gmail and Outlook. Staff see a yellow or red badge before they click — and one-click report to your admin queue. Scoring runs entirely on the device; email content never leaves the browser.
📱
Complete Coverage
The extension protects staff on their computer. Complete Coverage extends the same trust verdict to phones and webmail — it routes your inbound mail through our scoring relay and adds a trust banner right in the message, so staff reading email on a phone see the verdict too. Included at no extra cost, off by default, opt-in per organization, and it never blocks or delays your mail.
🚨
Community Threats
When two staff at your school report the same scam sender, the system warns everyone else automatically. A real attack at 9:03 AM protects the whole faculty by 9:04 AM.
Unique to TSNC
🤖
AI email analysis on demand
Click one button and a separate AI engine reads the suspect email — looking at sender patterns, link tricks, urgency framing, and body content the heuristic engine can miss. When AI flags it as dangerous, the email is queued for your admin to review and warn the whole school.
Coming Soon
📅
Calendar invite spam detection
Attackers send malicious .ics meetings that auto-add to your staff's Google Calendar — the reminder pops up later carrying a phishing link in the location/notes field. Our extension flags unsolicited invites from outside senders before they're accepted, closing a vector that mail filters routinely miss.
Coming Soon
✍️
Fake DocuSign / e-sign detection
Fake 'review and sign' emails impersonating DocuSign, Adobe Sign, Dropbox Sign, PandaDoc, SignNow, and BoldSign are one of the highest-conversion phishing templates. We check the brand keyword against each vendor's verified sending domains and flag impersonators on the spot.
🔍
Dark-web monitoring
Watches the public web + breach databases for any of your school's email domains. Alerts you when a teacher's school email shows up in a fresh leak — so they reset before attackers try the password. Staff can also monitor their own personal email addresses, not just their school account.
📊
Admin dashboard + reports
See click rates, training completion, extension install rate, and outstanding tasks at a glance. Compliance-ready PDF reports for FERPA, USCCB, and CISA audits.
Feature spotlight
When one teacher catches a scam, the whole school is protected.
Community Threats is the bit that nobody else does. The moment two staff at your school report the same sender as suspicious, our system promotes that sender to a confirmed threat for your whole organization — automatically, no admin click required.
Real attacks fan out across a diocese in minutes. We turn that against the attacker: the second your faculty starts catching it, every other inbox at your school sees the warning badge before they open it.
①
9:03 AM — First report
A teacher hits Report Suspicious on a fake "Microsoft 365 password expired" email. Our system flags the sender as org-pending.
②
9:04 AM — Second report at the same school
A second teacher reports the same sender. The system auto-promotes to org-confirmed — every staff inbox at your school now shows a warning badge on that sender.
③
9:08 AM — Platform escalation
If five distinct staff across different schools report the same sender, it gets promoted to platform-confirmed — every TSNC customer's staff sees the warning, not just yours.
④
Admin override anytime
Your IT director can mark any sender safe, escalate to the platform team, or block repeat false-reporters — all from the admin dashboard.
Awareness, not a filter
We don't block your email.
We're an awareness and training platform — our job is to help your staff recognize a threat, not to sit between them and their inbox deciding what they're allowed to read. We never block, delay, quarantine, or delete a real message. You stay in control of your mail; we just add a verdict.
💻
By default, nothing touches our servers
The browser extension scores every email on the device, inside the browser. Your staff's email content never leaves their computer and never reaches us. That's the default for every organization.
📱
Complete Coverage — included, for phones & webmail
Staff read plenty of email on their phones, where a browser extension can't run. Turn on Complete Coverage — included with your plan at no extra cost — and your inbound mail routes through our scoring relay, which adds the same trust banner right in the message, so a phone or webmail reader sees the verdict too. This is the only time mail passes through our servers, and it happens only because you chose it.
🕊️
Fail-open, and it forgets
The relay is built to fail open: if anything goes wrong, the original message is delivered untouched — we would rather miss a banner than lose your mail. And it's score-and-discard — we keep the verdict, never the body, subject, or attachments.
One more exception, in the open: “Analyze with AI” is a separate, per-message, opt-in button. When a staffer taps it, that one email is sent to our AI partner for a deeper read (never stored beyond a short retention window). It's outside the relay, it's always the user's choice, and it's off unless your organization enables it. Everything else stays on the device.
Pricing built for school budgets
See what your school would pay.
$5 per staff member, per month — billed annually (1-year minimum). Sliding scale at scale — your fifth-hundredth staff member costs less than your fifth. 20-staff minimum.
Billed annually · 1-year minimum · the monthly figure is the annual contract ÷ 12
50
20200500800999
Your monthly total
$250/mo
50 staff × $5.00/mo
= $3,000/year — billed annually (1-year minimum)
At scale, the per-staff rate drops: $5 for the first 99 staff, then $0.10/user off every additional 50 staff down to a $3.50/user floor. Student coverage is optional at $1/student/mo ($12/yr). Family-extension protection bundled for staff households. All billed annually (1-year minimum).
🏛️ 1,000+ staff?
Enterprise & multi-org tier
Dioceses, districts, and networks managing multiple schools get a single contract, cross-org rollup dashboard, sliding-scale volume pricing, and optional multi-year prepay discounts. Pricing is custom per contract.
Frequently asked questions
What's the minimum?+
20 staff members, on a 1-year minimum contract ($100/month — billed annually as $1,200/year). Smaller schools still pay the 20-staff minimum. We figured 20 was a fair floor — below that, the math doesn't justify a dedicated platform; we'd recommend the Family plan extended to a few teachers instead.
Are students included?+
Student account coverage is an optional add-on at $12/student/year — just $1/month, billed annually (flat rate, no bracket discount). Schools can opt in at signup or anytime later from /admin/settings, and can opt out just as easily. Adding students does NOT change your per-staff bracket pricing; the two line items bill independently. Schools that don't opt in can still direct students and families to self-purchase a Family Plan ($19.99/mo, up to 5 accounts) or Individual Plan ($4.99/mo) via the school's fundraising page — and the school still earns a 25% donation on each Family Plan signup.
Can we pay by check / ACH / wire?+
Yes. Organization plans are annual contracts (1-year minimum) — pay the year by credit card via Stripe, or request an invoice (Net 30). ACH and wire instructions are included on every invoice.
What about FERPA and student data?+
TSNC operates as a FERPA-compliant 'school official' service provider. We sign the SDPC National Data Privacy Agreement on request. All US data hosting; encryption in transit (TLS 1.3) and at rest (AES-256). No data sales, no advertising. Full details at /trust.
Does ThouShaltNotClick read or block our email?+
By default, no — the browser extension scores email on the device, inside the browser, and the content never reaches our servers. We also never block, delay, or quarantine mail; we're an awareness and training platform, not a spam filter. The one exception is Complete Coverage, included with your plan at no extra cost and turned on per organization: it routes inbound mail through our scoring relay so staff on phones and webmail get a trust banner too. Even then the relay is fail-open (any error delivers the original untouched) and score-and-discard (we keep the verdict, never the message body). 'Analyze with AI' is a separate, per-message opt-in that's off unless you enable it.
How long does setup take?+
About 15 minutes to create the org account and invite admins. Force-installing the browser extension via Google Workspace adds another 10 minutes (see our IT deployment guide). Most schools are running their first simulation within an hour of signing up.
Can we cancel?+
Organization plans are annual (1-year minimum, billed annually). You're committed for the contract year and can simply choose not to renew at the end of the term — there's no multi-year lock-in hidden in fine print. If you need to cancel mid-term, contact us and we'll handle it case-by-case.
Do you support diocesan / district rollouts?+
Yes — diocesan/district enterprise accounts cover multiple schools under one contract with sliding-scale pricing. Enterprise admins get a roll-up dashboard across all member schools, single billing contact, and dedicated support. Talk to us at setup@thoushaltnotclick.com.
Try it free for 14 days.
No credit card required. We'll have your first simulation in your staff's inboxes within an hour of signup.
"Be wise as serpents and innocent as doves." — Matthew 10:16