Defending schools under siege from cyber and identity threats.

Clever serves 28M+ users who access sensitive data, and cyberattacks on school districts are on the rise
—some causing millions of dolars in losses.
The Clever Identity Threat Detection (ITDR) tool uses signals I helped define to detect anomalies, respond, and alert admins to potential breaches. It gives districts a bird’s-eye view of who is accessing their systems with clear, digestible analysis.
Balancing feasibility, attack vectors, and user needs to prototype an actionable dashboard.
I had to consider attack vectors, the unique aspects of the K–12 space, feasibility, and system capabilities to determine which types of anomalies we could detect and how to prioritize them to prevent alert fatigue.
Security Engineer and me built a prototype in a data visualization tool, tested it with an expert admin, and proposed a vision mock-up.
To understand which data might be important to users and why, I first needed to learn about the types of attacks and how they could appear in login logs.
This process helped us define the future of Clever’s ITDR platform, move toward an MVP, and focus on alerting on signals that truly matter—allowing us to learn and improve.

