Red Flag Safety Alerts

Overview

Red Flag Safety Alerts notify school counselors, administrators, and designated safety contacts when a student searches for or types concerning keywords related to self-harm, suicide, violence, or abuse. These alerts are designed to enable early intervention and are a critical component of student safety.

KyberGate monitors search queries, URLs, and browsing activity for 80+ safety keywords across multiple categories. When a match is detected, an alert is generated immediately.

Prerequisites

• KyberGate organization with safety monitoring enabled
• Admin access to configure alert recipients
• At least one designated safety contact (school counselor, social worker, or administrator)
• Understanding of your district's threat assessment and intervention protocols

What Keywords Are Detected

KyberGate monitors for keywords in these categories:

Self-Harm & Suicide

• Direct references: "how to kill myself," "I want to die," "suicide methods," "self-harm," "cutting," "overdose," "end my life"
• Indirect signals: "no reason to live," "better off without me," "goodbye letter," "nobody would care"
• Crisis resources searched: suicide hotline numbers, crisis text line

Violence & Threats

• School violence: "school shooting," "bomb threat," "bring a weapon," "hit list," "kill everyone"
• Weapons: "how to make a bomb," "buy a gun underage," "weapon concealment"
• Targeted violence: "I want to hurt [name]," "revenge," "attack plan"

Abuse & Exploitation

• Abuse indicators: "my parent hits me," "being abused," "can't tell anyone," "afraid to go home"
• Exploitation: grooming-related search patterns, exploitation terminology

Substance Abuse

• Drug-related: substance names combined with purchase/use intent
• Alcohol: underage drinking indicators

The keyword list is reviewed and updated quarterly by child safety experts. KyberGate uses contextual analysis (not just keyword matching) to reduce false positives — for example, a student researching the topic of suicide for a health class assignment is analyzed differently than a student searching for methods.

Where Alerts Appear

When a Red Flag is detected, alerts are delivered through multiple channels simultaneously:

1. Dashboard Alert Center — a red alert badge appears in the KyberGate dashboard sidebar. Click to see alert details including the student, keyword(s) matched, full search query or URL, timestamp, and device.
2. Email Notification — designated safety contacts receive an email within 60 seconds of detection with all alert details and a direct link to the student's profile.
3. Push Notification — if the KyberGate mobile app is installed, safety contacts receive a push notification.
4. SMS Alert (Optional) — for critical alerts (self-harm, active violence), SMS can be enabled for immediate notification even when email isn't monitored.

Steps

Step 1: Enable Safety Alerts

Log in to the dashboard → Settings → Safety → Red Flag Alerts. Toggle to Enabled.

Step 2: Add Safety Contacts

Under Alert Recipients, add the people who should receive Red Flag notifications:

• Click Add Contact
• Enter name, email, phone (for SMS), and role
• Choose which alert categories they should receive (some contacts may only need self-harm alerts, not substance abuse)
• Click Save

Recommended contacts: school counselor(s), principal/assistant principal, school psychologist, district safety coordinator.

Step 3: Configure Alert Severity Levels

KyberGate assigns severity to each alert:

• Critical (red) — immediate danger indicators (active self-harm intent, violence threats). Delivered via all channels including SMS.
• High (orange) — concerning patterns requiring follow-up within 24 hours. Delivered via email and dashboard.
• Moderate (yellow) — signals worth monitoring. Delivered via dashboard; email optional.

Adjust thresholds under Settings → Safety → Sensitivity.

Step 4: Review and Respond to Alerts

When an alert arrives:

1. Click the alert to view full details
2. Review the student's recent browsing activity for additional context
3. Follow your school's threat assessment protocol
4. Mark the alert as Reviewed, Escalated, or False Positive
5. Add notes about the response taken

Step 5: Review Alert History

Go to Reports → Safety Alerts to see alert history, trends, response times, and outcomes. This data supports your district's safety reporting and intervention effectiveness tracking.

How Counselors Should Respond

KyberGate provides detection — the response is a human process. Recommended response framework:

1. Assess Immediacy — Is the student in immediate danger? If yes, follow your emergency protocol (call 911, locate the student immediately).
2. Context Check — Review the full search/browsing context. Was this part of a class assignment? Was it a single query or a pattern?
3. Private Conversation — Meet with the student privately. Use open-ended questions. Do not mention "monitoring" or "alert" — ask about their wellbeing naturally.
4. Document — Record the interaction in your counseling notes and in the KyberGate alert response.
5. Follow Up — Schedule follow-up check-ins. Monitor for continued concerning activity.
6. Escalate if Needed — Involve parents/guardians, outside counselors, or law enforcement per your district's protocols.

Privacy Considerations

• Red Flag alerts are strictly confidential and visible only to designated safety contacts — not general IT staff, teachers, or other administrators (unless they are designated)
• Alert data is stored in a separate, access-controlled section of KyberGate's database
• Alert recipients should be trained on confidentiality requirements under FERPA
• Students are not notified when a Red Flag alert is generated — this preserves the opportunity for natural, non-confrontational intervention
• Alert data is subject to your data retention policy; safety alerts are typically retained longer (180–365 days) than general browsing logs
• KyberGate does not share alert data with any third party

Tips

• Keep the safety contact list updated — remove departed staff immediately
• Conduct an annual training for safety contacts on how to interpret and respond to alerts
• Review false positives monthly and provide feedback to improve detection accuracy
• Critical alerts should generate a response within 15 minutes during school hours
• Pair Red Flag Alerts with your district's existing threat assessment framework (e.g., the Virginia Student Threat Assessment Guidelines or your state's model)

FAQ

Q: How many false positives should we expect? A: With contextual analysis enabled, the false positive rate is approximately 15–20%. Most false positives come from legitimate academic research on safety topics. Marking false positives helps improve the system over time.

Q: Are alerts generated outside school hours? A: Yes, if the device is connected through KyberGate. Off-hours alerts may indicate a student in crisis at home — these are often the most important alerts.

Q: Can parents see Red Flag alerts? A: Not by default. If the Parent Portal is enabled, parents see general safety alerts but not the specific keyword details. The school decides how much information to share with parents based on the situation.

Q: What if a student is researching safety topics for class? A: Contextual analysis reduces these false positives. If an alert is generated from a class assignment, mark it as a false positive and add the assignment URL to the academic exception list.

Q: Does KyberGate monitor chat or email content? A: No. Red Flag detection applies to search queries, URLs, and browsing activity only. KyberGate does not read email content, chat messages, or document text.