How to Spot Phishing Emails, Scam Texts and Fake Google Alerts
Real phishing examples from NZ — what to look for, what to ignore, and what to do if you have already clicked. Includes the google-security.net red flag.
Resource Library
Practical cyber security resources for educators and students
This is where the site’s more durable guides, explainers, and checklists live. The goal is to keep useful resources easy to find and worth coming back to.
Privacy Checks for NZ School Apps and AI Tools
What NZ teachers and students should check before using AI tools, sharing student data through apps, or signing consent forms. Privacy Act 2020.
Building Cyber-Safe Habits as an NZ Educator
Practical professional-development habits NZ educators can build to reduce cyber risk at school — passwords, devices, phishing, student data.
Digital Safety Basics for Students in New Zealand
A practical student-friendly guide to safer passwords, suspicious messages, privacy settings, app permissions, and knowing when to ask for help.
Passwords, Passphrases, and MFA — A Simple Guide
Plain-language NZ guide to stronger passphrases, less password reuse, safer recovery settings, password managers, and MFA.
Using AI Tools Safely in NZ Schools — Checklist
What NZ teachers should check before pasting student work into ChatGPT, Gemini, or any AI tool. Privacy Act 2020, school-policy fit, and verification habits.
AI Safety for Students in New Zealand
NZ student guide to safer AI use for schoolwork — privacy, cheating risks, prompt hygiene, accuracy checks, and what not to paste.
AI Safety for New Zealand Educators
AI safety checklist for NZ teachers: protect student data, verify AI output, set classroom rules, and know when to pause before using a tool.
Cyber Security for Students in New Zealand
NZ student cyber security guide covering passwords, scams, privacy settings, devices, school accounts, and what to do when something feels off.
Cyber Security for New Zealand Educators
NZ educator cyber security guide covering school accounts, devices, phishing, student data, and early incident response.
Small Business Cybersecurity Guide: Protect Your NZ Company in 2026
Practical 2026 cybersecurity for New Zealand small businesses — passwords, phishing, payment-change scams, backups, privacy breaches, and incident response.
Is Your School or Business Website Secure? Free 10-Second Check
Free 5-check website security scan for NZ schools and small businesses. TLS, headers, exposed files, cookies, mixed content. 10 seconds, no signup.
Security Headers Explained: A Practical Guide for NZ Sites
Plain-language guide to HTTP security headers for NZ sites: what CSP, HSTS, X-Frame-Options, Referrer-Policy and Permissions-Policy do, with copy-paste fixes.
HSTS Strict-Transport-Security Explained for NZ Sites
What HSTS Strict-Transport-Security does, how to enable it for nginx, Apache and Express, plus includeSubDomains and preload gotchas for NZ sites.
Privacy Act 2020 for NZ Schools
NZ Privacy Act 2020 guide for schools: what educators should check before collecting, sharing, storing, or fixing student information.
Secure Cookie Flags: HttpOnly, Secure and SameSite for NZ Sites
What the HttpOnly, Secure and SameSite cookie flags do, why each matters under the NZ Privacy Act 2020, and how to set them in nginx, Apache and Express.
Web Server Hardening for NZ Sites: Block Exposed .env, .git and Backup Files
How to block exposed files like .env, .git, backup.zip, phpinfo.php and server-status on nginx and Apache, with NZ examples and 404 verification.
Environment File Leaks Explained: Detecting and Rotating Secrets for NZ Sites
Detecting and responding to leaked environment files on NZ sites: what counts as a secret, rotation playbook, scanner caveats and a secrets manager overview.
Incident Response for NZ Schools: A Practical First-Response Guide
NZ school cyber incident response guide: contain access, preserve evidence, report to CERT NZ and Netsafe, and assess Privacy Act duties.
TLS 1.2 and 1.3 Explained for NZ Sites
Plain-English guide to TLS for NZ sites: what TLS 1.2 and 1.3 mean, why old TLS versions are dangerous, and copy-paste nginx and Apache configs for modern TLS.
Content-Security-Policy Deep Dive for NZ Sites
CSP deep dive for NZ sites: what unsafe-inline, unsafe-eval, nonces, hashes, wildcards and report-only mode do, with per-directive fixes for nginx and Apache.
HTTPS Everywhere: Fixing Mixed Content on NZ Sites
Plain-English guide to HTTPS everywhere on NZ sites: what mixed content is, browser auto-upgrade, CSP upgrade-insecure-requests, and www to apex redirects.
SSL Certificate Management for NZ Sites
Plain-English guide to SSL/TLS certificate management for NZ sites: the certificate lifecycle, renewal windows, expiry monitoring, and what to do when expired.
Security.txt Explained: How to Publish RFC 9116 for NZ Sites
Plain-English guide to RFC 9116 security.txt for NZ sites: what to put in /.well-known/security.txt, what to leave out, and a copy-paste example.
TLS Certificate Renewal Automation for NZ Sites
TLS certificate renewal automation for NZ sites: Certbot, Let's Encrypt, DNS-01 vs HTTP-01 challenges, and keeping HTTPS certificates renewed automatically.
Rate Limiting and Bot Protection for NZ Sites
Rate limiting and bot protection for NZ sites: why scan-probing differs from real attacks, fail2ban-style heuristics, and copy-paste nginx limit_req snippets.
Redirect Chains Explained: How to Fix Long or Insecure Redirects on NZ Sites
Why long or insecure redirect chains hurt NZ sites, how to flatten them into a single 301 hop, and copy-paste nginx and Apache single-301 configs.
Cookie Consent Banners: NZ Privacy Act 2020 Compliance Guide for NZ Sites
Plain-English guide to cookie consent banners under the NZ Privacy Act 2020: banner UX rules, what to include, and copy-paste WordPress and HTML.
Phishing and Fake Login Forms for NZ Schools
Phishing and fake login forms for NZ schools: how exposed-secret findings connect to phishing campaigns, with fake-login-form detection and response steps.
AI Tools in the Classroom - Policy Template
AI policy classroom NZ template for educators covering privacy, student data, verification, disclosure, and classroom use boundaries.
Phishing Anatomy - NZ-Specific Examples
Phishing examples seen in NZ schools: how to recognise phishing red flags, what to do if you click, and how schools should teach this without scare tactics.
Student Digital Footprint Guide
Student digital footprint NZ guide covering privacy settings, posts, accounts, school data, and what to check before sharing online.
AI Images and Copyright: A NZ Student Guide
A New Zealand student guide to AI image copyright, covering ownership uncertainty, schoolwork, licences, attribution, privacy, and safer reuse.
Cyber Safety and the New Zealand Curriculum
Align cyber safety teaching with the New Zealand Curriculum: privacy, digital citizenship, critical thinking, and response skills.
MFA Setup Guide for Everyone in New Zealand
A plain-English multi-factor authentication setup guide for New Zealanders, covering authenticator apps, passkeys, recovery codes, and safer sign-in.
Password Managers for Schools — A NZ Guide
Free and low-cost password manager options for NZ schools — practical guidance on choosing, setting up, and using one safely.
Phishing Hub for NZ Schools: Recognition, Response, and Reporting
A NZ schools phishing hub covering how to recognise phishing, what NZ-specific patterns look like, how to respond when a student clicks, and where to report.
Social Engineering — What NZ Students Need to Know
Social engineering tactics used against NZ students — how to spot phishing, vishing, pretexting, and bait attacks before they catch you out.
What To Do When a Student Clicks a Phishing Link
NZ school and parent response when a student clicks a phishing link: first 5 minutes, Privacy Act 2020, CERT NZ and Netsafe reporting, parent letter.