For Education

Cyber Essentials readiness
for schools without the enterprise bill

Patch management, compliance evidence, and device posture for schools, colleges, and universities — with a 50% education discount and UK GDPR built in from day one.

50%
Education
discount

Every tier, every feature, half the price

50% off Pro and Business tiers for verified educational institutions — minimum 50 managed devices. Smaller schools (<50 devices): Starter free tier is always free. Contact us with your .ac.uk or .sch.uk email to verify.

Challenges we understand

Education IT is different

Budget

Enterprise tools at enterprise prices

Most endpoint management platforms aren't built for schools. The pricing structures assume IT teams with full-time staff and five-figure budgets.

Compliance

DfE expects Cyber Essentials. Proving it is hard.

The Department for Education's Cyber Security Standards for Schools require Cyber Essentials certification. Most schools don't have a clear path to the evidence.

Devices

Mixed fleet, high churn

Staff laptops, student devices, shared classroom machines, and a server room running Linux. Getting consistent patch visibility across all of them is a real problem.

Data protection

GDPR and pupil data don't mix with US hosting

Many tools store data on US servers. That's a problem when you're processing data about minors. PatchPilot is EEA-hosted with no transatlantic transfers.

Staff capacity

Small IT team, large device estate

A single IT coordinator managing 600 devices across multiple sites. No time for manual patch audits. No budget for a dedicated security team.

Reporting

Board and governors want evidence, not status updates

Governors and trustees are asking harder questions about cyber risk. "We think we're patched" isn't an answer that satisfies them anymore.

Compliance coverage

Frameworks that matter for UK education

PatchPilot maps device posture and patch state to the frameworks education institutions actually need — not a generic compliance checklist.

Cyber Essentials / CE+

DfE-required from 2025

Patch currency, firewall, access control, secure configuration — all mapped to Cyber Essentials controls with evidence your assessor can review directly.

DfE Cyber Security Standards

Schools & Colleges Framework

The 2023 DfE Cyber Security Standards for Schools align closely with Cyber Essentials. PatchPilot covers the technical controls you're expected to demonstrate.

UK GDPR / Data Protection

Article 32 security measures

Patch state and encryption coverage are core GDPR technical safeguards. Evidencing them at audit or following a breach is straightforward with PatchPilot's export.

ISO 27001:2022

For universities seeking certification

A.8 Technology controls evidence — patch management, vulnerability management, endpoint configuration — all collected and exportable per ISO 27001 clause.

What's included

Every feature, built for education scale

No locked-behind-paywall compliance features. Every tier includes the same core platform — you pay for devices, not capabilities.

Patch & endpoint management

  • Real-time patch state for Windows and Linux devices
  • Automated patch deployment with ring-based rollout
  • Third-party app patching (Chrome, Office, etc.) via winget
  • Reboot scheduling with maintenance windows (no disruption during lessons)
  • Patch exclusions for pinned software versions
  • Unmanaged device discovery via passive ARP

Compliance & security

  • Cyber Essentials evidence pack — one click export
  • Cyber insurance readiness score on the dashboard
  • BitLocker enforcement status for staff devices
  • Defender and Firewall posture for every device
  • Vulnerability CVE detection with SLA tracking
  • Audit log exportable for governor/trustee review

Remote access & management

  • Remote desktop panel (Windows) with session recording
  • SSH access panel (Linux) with audit trail
  • Step-up MFA required for remote wipe and destructive actions
  • Run PowerShell or shell scripts remotely from the dashboard

GDPR & data protection

  • All data processed within the EEA
  • UK ICO-registered data processor
  • Signed DPA available for your records
  • No US data transfers, no transatlantic routing
  • Sovereign deployment available for multi-academy trusts with DfE data-sovereignty requirements
Education pricing

Half price. All features.

50% off applies to Pro and Business tiers. Minimum 50 managed devices to qualify for education pricing. Schools with fewer than 50 devices: Starter free tier (up to 5 devices) is always free — no discount needed. Annual billing saves an additional 20% on top.

How to verify: Contact us with your .ac.uk, .sch.uk, or .edu email — or a school registration document. We apply the 50% discount manually within 1 working day. Multi-Academy Trusts: contact us separately for MAT volume pricing.
Free
£0
Up to 25 devices, always free
  • Windows devices (v1.0)
  • Core patch management
  • Basic posture checks
  • Cyber insurance readiness score
Business EDU 50% off
£2/device/mo
£4/device/mo standard
  • Everything in Pro
  • MSP console (for multi-site MATs)
  • Intune integration (+£10/mo)
  • Helpdesk webhook integrations
  • Priority support

Multi-Academy Trusts managing multiple schools: contact us for MAT volume pricing. Annual billing saves an additional 20%.

COMING NEXT

What we're building for education

Voted on by academy IT leads in early access. Full roadmap →

Q3 2026
DfE data sovereignty controls

Explicit DfE-aligned data residency commitments, retention schedules, and deletion certificates for GDPR/PECR compliance reporting.

Q4 2026
Governor / SLT read-only portal

Share a live compliance dashboard with your school governor or senior leadership team — no login needed, just a secure link.

Q4 2026
M365 Education SaaS backup

Protect student and staff data in Exchange and SharePoint — point-in-time restore, retention reports, and GDPR evidence export.

Ready to meet the DfE's cyber security standards?

Apply for education access with your .ac.uk or .sch.uk email. We'll get you set up with the education discount applied.