# Education URL: https://www.deepinfo.com/solutions/industries/education/ ## Education Runs on Open Networks. The Data Isn’t Open. Departments, labs, student societies and campus services each run their own sites, so no central inventory is ever complete. Behind that open surface sit student records, research data, health systems and payment pages. The Deepinfo Platform finds what the institution exposes, scans it continuously and watches for institutional accounts in leaked data and lookalikes aimed at applicants and donors. [Request demo](https://www.deepinfo.com/request-demo/) ### An Open Campus Holds Sensitive Data. Decentralized IT #### Many Owners, One Name Departments, labs and student societies register domains and run systems without going through central IT. Research #### Data Worth Stealing Research in technology, life sciences and defense-adjacent fields draws the interest of state-sponsored actors. Accounts #### Addresses Everywhere Staff and student addresses sign up to many third-party services, and those services get breached. Seasons #### Phishing on a Calendar Admission, scholarship, fee-payment and donation cycles each bring lookalike pages aimed at applicants and donors. ### From One Domain to Every Department. On a campus, the work starts with the gap between the inventory and the internet. Discovery closes it from the outside. 1. **Seed** Add the institution’s primary domains. Each one becomes a starting point. 2. **Expand** Asset Discovery enumerates subdomains and their IP addresses, then runs reverse lookups against the index to find departmental and project domains registered separately. 3. **Review** Your team approves what belongs to the institution and ignores the rest. Any decision can be reverted later. 4. **Monitor** Approved assets are scanned continuously from then on. A faculty or affiliated entity can run as its own portfolio. ### Institutional Accounts in Leaked Data. Employee Email Breach Monitoring lists the institutional addresses found in known breaches and the data types each breach exposed. Compromised Employee Device Monitoring finds infostealer infections on the machines that hold institutional logins. Your team works each record to a recorded state, and a notification rule can flag new breaches as they are detected. [Employee Email Breach Monitoring](https://www.deepinfo.com/platform/cti/employee-email-breach-monitoring/) - **Per address**: Breaches it appears in, data types exposed - **Per device**: Password and cookie counts, same-password rate - **Notification**: New email breach detected - **Report**: CTI Email Breach Summary ### What the Platform Maps on Campus. Issues are classified against the mapped frameworks as they are raised. Education-specific rules sit alongside as context. - **HIPAA**: Mapped (`hipaa`). Campus health services. - **PCI DSS 4.0 and 3.2**: Mapped. Tuition, fee and donation payment pages. - **OWASP Top 10 (2021), CWE**: Mapped. Student portals and departmental web applications. - **FERPA**: Context only. Applies to US student records. - **GDPR, KVKK**: Context only. Personal data rules, not platform classifications. ### What Campus Security Teams Use It For. #### [Attack Surface Management](https://www.deepinfo.com/solutions/use-cases/attack-surface-management/) One inventory across faculties, labs, societies and campus services. #### [Subsidiary Oversight](https://www.deepinfo.com/solutions/use-cases/subsidiary-oversight/) Faculties, institutes and affiliated entities as portfolios, compared on one scale. #### [Credential Exposure Management](https://www.deepinfo.com/solutions/use-cases/credential-exposure-management/) Staff and student credentials in breach data and infostealer logs. #### [Phishing Detection and Prevention](https://www.deepinfo.com/solutions/use-cases/phishing-detection-and-prevention/) Lookalike admission, fee and donation domains caught when they first appear. #### [Vulnerability Management](https://www.deepinfo.com/solutions/use-cases/vulnerability-management/) CVEs on departmental servers ranked by CVSS, EPSS and CISA KEV. #### [Data Leak Detection](https://www.deepinfo.com/solutions/use-cases/data-leak-detection/) Your institution and its domains named on forums, markets and leak sites. #### [Dark Web Monitoring](https://www.deepinfo.com/solutions/use-cases/dark-web-monitoring/) Search and watch the dark web for your names, domains and addresses. #### [Compliance and Audit Readiness](https://www.deepinfo.com/solutions/use-cases/compliance-and-audit-readiness/) HIPAA and PCI DSS findings classified as they are raised, with their history. ### Read a University’s Story and Related Sectors. - [A leading research university](https://www.deepinfo.com/customers/research-university/) (Customer story): Exposure monitored across decentralized departments, research labs and student-organization infrastructure. - [Government](https://www.deepinfo.com/solutions/industries/government/) (Industry): Public services spread across many departments. - [Healthcare](https://www.deepinfo.com/solutions/industries/healthcare/) (Industry): Health data behind a sprawling surface. ### The Data Is Yours to Use Too The index under the platform is also sold as data. Teams that build their own tooling query it through the API or take it as bulk feeds, and Internet Insights shows what it sees each day. - [API Services](https://www.deepinfo.com/data-api/apis/) - [Data Feeds](https://www.deepinfo.com/data-api/feeds/) - [Internet Insights](https://www.deepinfo.com/insights/) ### Questions About Deepinfo in Education **Can the platform find sites departments set up on their own?** That is what discovery is for. Starting from your primary domains, Asset Discovery finds subdomains, the IP addresses behind them and related domains through shared registrants, mail servers and name servers. Your team decides what belongs. **We have a small security team. Is continuous monitoring realistic?** Scanning and discovery run on their own once assets are approved. Vulnerabilities are ranked with CVSS, EPSS and CISA KEV, and notifications can arrive as a daily or weekly digest instead of one by one. **Are student addresses covered?** Breach monitoring follows the addresses on the email domains in your scope, so student addresses are covered where students use an institutional domain. **Can the platform find fake admission or donation pages?** [Brand Risk Protection](https://www.deepinfo.com/platform/brp/) matches newly seen domains against your institution’s names, down to letters from other alphabets, and watches each one your team approves across DNS, mail, certificate and HTTP. Confirmed ones can go to [Managed Takedown](https://www.deepinfo.com/platform/brp/managed-takedown/). **Is FERPA mapped?** No. FERPA is not a platform classification. HIPAA and PCI DSS are, which covers campus health services and payment pages, and issue history and reports give your auditors evidence for the rest. **Is there access for academic research?** Qualifying researchers can apply to the [Researcher Program](https://www.deepinfo.com/programs/researcher/) for access to the dataset. Tell us what you are studying and which parts of the data you need. ### See Your Campus From the Outside. Book a demo that starts from your institutional domains. [Request demo](https://www.deepinfo.com/request-demo/)