Craidd (pronounced “Cryth”) — Welsh for core
Know exactly where your school stands, in under two minutes. Assess your current position, see which risks matter most, and leave with a clear path to improvement, in language a governing body can read without a translator.
A sample governor report, the page a governing body reads each term. Sample schools, sample findings.
Pick a check. On the left, what a typical tool reports. On the right, the letter Craidd writes to the head about the same thing.
Dear Headteacher,
Parents, staff and suppliers would have no easy way to tell it apart from the real thing.
It is in this term’s governor report, with the evidence behind it.
Sample data for a sample school. Mail check, Web check, What’s visible and Readiness are in every Craidd plan.
Try a few questions from the free check. Your level and the first thing to fix change as you answer.
Is multi-factor authentication (MFA) required for all staff?
MFA blocks the overwhelming majority of account takeovers.
Readiness level
One of four levels. Answer a question and it appears here.
First thing to fix
Craidd names the gap, says what it means for a school, and gives the fix you can hand to your IT provider.
This is not enterprise software with a schools page bolted on. Every part of it assumes a UK school or trust: the guidance you answer to, the budgets you work within, the term you are in, and the people who actually have to use it.
Ceidwad works with schools and trusts, and nobody else.
Short exercises new staff actually finish, before their first convincing email arrives. In beta.
Suggested timings. Every school’s calendar is its own, and Craidd works to yours.
Twenty things, and one price for all of them — grouped the way the product is, so the first morning after you sign up looks like this page. Nothing here is an add-on and nothing is sold separately.
The measuring half. Nothing here changes a setting; it tells you what is true today.
The specific gaps and the order to close them.
Whether someone can send email that looks like it came from your school, and the records that stop them.
What your website tells a visitor's browser, checked every morning across every site you run.
What a stranger can find out about your school without asking you first.
Available to any subscribing school.
The records a school authors and hands to a governor. Craidd can vouch for what it produced itself; these are yours, and it says which is which.
The annual filtering and monitoring review KCSIE asks a governing body to record, and the checks under it.
Your devices and contracts in one place, watching the dates that go stale while nobody is looking.
What your school has decided to watch, who owns it and when you will look at it again. Nothing you record here moves your readiness level.
What you can show a governor, and where it is kept. Craidd records that a document exists — it never holds a copy of it.
The half that matters at three in the morning — what you do, and the record you keep while doing it.
Who does what in the first thirty minutes, written down before you need it and printable.
Report it in a sentence. The 72-hour clock starts and you keep the record, whatever you decide.
The half of this that is people. Nobody is named, scored or ranked — the record is that it happened.
Short hands-on exercises staff will actually finish. The score stays on your own screen, and all we record is whether the day was survived.
In beta. Switched on per school rather than by default.
Practice emails to your own staff, and the reporting habit that protects you on the real day.
In beta and not yet open to customer accounts.
Written for people who do not run the network, and are answerable for it anyway.
The decisions waiting on you, kept separate from the work that is not yours.
What you tell trustees, as a pack you can print and hand across a table.
Every academy's position on one page, and each one's own record underneath.
For multi-academy trusts.
What is happening outside your school, in plain words. Reference material — Craidd does not monitor your devices or network.
Who is being hit right now, worldwide and in education, from public leak-site data.
Real notes from past attacks, redacted, so staff and governors see one before they meet one.
The file endings left behind by known ransomware, so you can name what you are looking at.
Look up a file's fingerprint against known malware, without ever sending us the file.
Check a password against known breaches without ever sending it to us.
One published annual price by school type — no hidden quotes. A multi-academy trust is priced per academy, each school at its own rate, on a single invoice. No setup fees, no per-user pricing, no auto-renew trap.
Your exact price, from your DfE registration. Or pick your school type below.
The figure follows your DfE registration, so two schools of the same type pay the same. Nothing is decided on a sales call.
Schools in Wales, further education and independent schools: the MIS connection is available on request, so the price is the subscription alone.
| Item | Per year |
|---|---|
| Ceidwad Craidd annual subscriptionPrimary / Junior · every module, every plan | £608 |
| Wonde MIS IntegrationConnects Craidd to your school’s MIS | Included |
| Set-up fee | £0 |
| Per-user or per-device charges | £0 |
| Governor report and action plan | Included |
| Total for the year | £608 |
What the price includes
The price follows your phase and size on the DfE register. It is not the output of a sales conversation, and it is published on this page.
One figure for the school. Taking on more staff does not change it.
A three-year term locks the price for the full three years. There is no multi-year discount — what you are buying is that the figure cannot move.
A single invoice for the term, or once a year in advance on a three-year term. No monthly billing and no payment gateway.
The findings, the order to fix them in and the governor report are part of the subscription, not an add-on.
No, and it does not certify you against anything. It tells you where you stand and what to fix first, which is most of the work a certification would then test. What Cyber Essentials actually involves.
No. It sits alongside your IT provider; it does not replace them. Already running a free scanner, or your firewall's alerts? Keep them. Ceidwad is the layer above — it makes sense of the whole picture and gives your leadership the board-ready view and the plan for when something goes wrong.
Whoever knows how the school is run — usually a business manager, a head, or the person who deals with your IT provider. It asks about arrangements, not about configuration.
No. If a question needs an answer you do not have, “don’t know” is a legitimate answer and becomes a finding in itself.
Yes. Each academy holds its own position, and the trust sees every one of them on a single screen, including which sites pull the average down.
Yes. The assessment is free. It tells you where you stand and what to fix first before you spend anything.
By invoice. Never card, no payment gateway, no auto-renew. A single invoice for the term, or once a year in advance on a three-year term.
Turn a card to see what a good answer sounds like, and what should worry you. Craidd is built so a school can answer every one of them with a date and a document.
Two minutes, free, no sign-up. You leave with a level, the three things to look at first and the fix for each — and it is yours whether or not you choose Ceidwad.
Ceidwad — Welsh for guardian
