ThouShaltNotClick is the phishing simulation and cybersecurity training platform built specifically for Catholic schools, parishes, and organizations (such as Dioceses).
We send realistic phishing emails to your staff from rotating domains scaled by difficulty. Can they spot the fakes?
See who clicked, who reported, and who needs training. Department breakdowns, trends, and individual risk scores.
Real-time email analysis, trust badges, and link scanning. Protection that works even outside of simulations.
Personal phishing protection for anyone
Protect your entire community — unlimited staff accounts, free parent accounts
Are you a teacher at a Catholic school? Get free cybersecurity protection — Chrome extension, training, and phishing simulations. Then earn a $100 gift card when your school signs up through your referral link.
Get Free Teacher Access →Catholic and private schools can use Title II-A (professional development), Title IV-A (safe & healthy students + technology), the FCC Cybersecurity Pilot Program, E-Rate, and FEMA/CISA grants to fund ThouShaltNotClick. Your local public school district is required by federal law to provide equitable services.
We believe protecting your data is just as important as protecting you from phishing. Here's our commitment — not buried in fine print, but front and center.
Our Chrome extension analyzes emails entirely on your device. Email subjects, bodies, and sender addresses are never transmitted to our servers. Not encrypted and sent — never sent at all.
The AI Etiquette Checker runs 100% locally. We never see your prompts, your conversations, or what you ask your AI tools. Only aggregate counts (“said please 12 times”) stay on your device.
No third-party analytics. No tracking pixels. No ad networks. No data brokers.Zero. Your information exists to serve you, not to be packaged and sold.
The only data we store: your account info, simulation results (did you catch the phish?), and training progress. Passwords are cryptographically hashed. URL scans are processed in real-time and never stored.
Our privacy commitments are embedded in our source code — not just our marketing.
Every file in our Chrome extension carries a privacy guarantee header that developers can verify.