NTAC modelBuilt on the U.S. Secret Service school threat assessment model

The warning signs are there. Act on them.

VeriThreat gives your school's threat assessment team one place to receive concerns, investigate them the way the Secret Service recommends, and support students before a crisis.

  • No student profiling or risk scores
  • AI assists; your team decides
  • Syncs with your SIS via OneRoster
  • Every record access is audit-logged
app.verithreat.com/btam
Queue
New reports
4
Urgent
2
Active cases
11
Overdue
1
A
Student AImminent danger reported
#214 · Threat communicated · Northside HS
Reporter flagged an emergency. Confirm emergency procedures were followed.
B
Student BUrgent
#212 · Concerning post · Northside HS
Vague statement about "everyone will see" plus reported access to firearms at home.
C
Student CElevated
#209 · Behavior change · Lincoln MS
Withdrawal, falling grades, and a peer's concern. No threat reported.
D
Student DRoutine
#207 · Harassment · Lincoln MS
Ongoing conflict between two students; second report this month.
What the research shows

School attacks are rarely sudden. Someone almost always saw something.

The Secret Service's National Threat Assessment Center studied 41 targeted attacks on U.S. K-12 schools from 2008 to 2017. What they found should change how every district thinks about prevention.

100%
of attackers showed concerning behavior before their attack
Concerning behavior was displayed at school in 94% of cases.
80%
caused others to worry about their safety, or the safety of those around them
The concern existed. It needed somewhere to go.
66%
communicated their intent or threatened the target in the two weeks before
More than half did so within two days.
80%
had been bullied by classmates
For over half, the bullying was a persistent pattern.

Source: U.S. Secret Service NTAC, Protecting America's Schools (2019), a study of 41 attacks on K-12 schools, 2008–2017.

Physical security alone can't solve this.

In the same study, 83% of attacks were over within five minutes, and nearly half ended within one. Many of the schools already had cameras, resource officers, and lockdown procedures. By the time an attack starts, it is almost always too late.

The opportunity is earlier: in the weeks and months when a student is struggling, and when the people around them notice. That's where VeriThreat works.

“In many cases, someone observed a threatening communication or behavior but did not act, either out of fear, not believing the attacker, misjudging the immediacy or location, or believing they had dissuaded the attacker.”
U.S. Secret Service NTAC, Protecting America's Schools (2019)
How it works

From a teacher's concern to a documented support plan.

VeriThreat puts NTAC's operational guidance into a day-to-day workflow, so every concern is received, assessed, and followed through the same way.

  1. 01

    Report

    Any staff member can report a concern in about two minutes: who was involved, what happened, and photos or screenshots. An immediate-danger option tells them to call 911 right away and pins the report to the top of the queue.

  2. 02

    Triage

    Reports land in one queue for your threat assessment team. AI suggests how quickly each one needs attention, but it can never lower a reporter's emergency, and the team reviews every report.

  3. 03

    Assess

    The team gathers information across NTAC's 13 investigative themes: motives, communications, weapons access, stressors, protective factors and more. Every note and interview is documented in one case file.

  4. 04

    Support & manage

    The team records its level of concern and builds a management plan with owners and due dates. Overdue items are flagged, and a finalized report becomes the document of record.

Central reporting

Make it easy to speak up, and impossible for concerns to get lost.

NTAC's research shows people often notice but don't act. VeriThreat gives every teacher, counselor, coach, and staff member a simple, confidential way to report, with clear guidance on what to include.

  • Search your SIS roster and tag every student involved by role
  • Attach screenshots, photos of notes, or documents
  • Immediate-danger option that says “call 911 first”
  • Reporters see their report's status, never confidential case details
Report a concern
Someone may be in immediate danger
Call 911 and notify administration now. This report goes to the top of the queue.
1 · Students involved
Search students by name or ID
Student BStudent of concern
Student EWitness
2 · What happened
A student showed me a post that said…
screenshot.png attached
AI case assistant

Every record in the case, organized in about a minute, with sources.

The assistant reads a student's reports, notes, and photos, then sorts what's known under each of NTAC's 13 investigative themes. Every statement links to the record it came from. Gaps are called out, not filled in.

  • Citations on every finding; unverifiable citations are removed
  • “Unknown” is encouraged. It tells your team what to find out next
  • Suggests people to interview and supports to consider
  • Students are pseudonymized before anything is sent
How we use AI responsibly
Case 18 · AI case assistant
AI case assistant
AI-suggested level of concern
Insufficient information
Statements are secondhand and ambiguous. Weapons access and planning are unverified. Recommend interviewing S2 and contacting the family today.
CommunicationsConcern indicated
S2 reports S1 wrote “everyone at this school will finally see.” Wording not yet verified. INCIDENT-212
Weapons accessConcern indicated
S1 mentioned a relative “keeps guns at the house.” Access unverified. INCIDENT-212
StressorsConcern indicated
Inappropriate interestsUnknown
PlanningUnknown
Violence as an optionUnknown
Advisory only. The team decides. Students are pseudonymized before analysis.
Documentation

A defensible record of every decision.

NTAC calls for documenting when reports come in, what was gathered, who was interviewed, and what interventions followed. VeriThreat captures it as your team works, and produces a clean, printable assessment report.

  • Team determination and rationale, finalized by a BTAM lead
  • Management plans with owners, due dates, and overdue alerts
  • Complete audit trail of who viewed or changed each record
Behavioral Threat Assessment Report.pdf
VeriThreat
Confidential
Behavioral Threat Assessment Report
Student
Reports reviewed
Investigative themes
Team determination
Management & support plan
Finalized by BTAM lead · 4 action items
Built for the whole school

Each role sees what it needs, and nothing more.

Teachers & staff

A two-minute way to report what they saw or heard, guidance on what to include, and confirmation that it reached the team. Reporting isn't a disciplinary referral, and the form says so.

Threat assessment teams

A prioritized queue, complete case files, structured assessments, AI-organized evidence, management plans, and finalized reports, all in one place and shared across the team.

District leaders

Consistent process across every school, role-based access, roster sync from your SIS, and a full audit log, without district administrators seeing confidential student records.
Responsible AI

AI that organizes evidence. Never AI that profiles kids.

NTAC is explicit: there is no profile of a student attacker, and the goal isn't to predict violence. So we built VeriThreat's AI to do the parts machines are good at, and leave judgment to people.

What it does
  • Orders the queue so urgent reports are seen first
  • Sorts evidence under NTAC's 13 themes
  • Cites a source for every statement
  • Flags gaps and conflicting information
What it never does
  • Score or rank students who haven't been reported
  • Use race, religion, disability, or income
  • Lower an emergency a person flagged
  • Make the team's determination
Security & privacy

Student safety records deserve the strongest protection.

Threat assessment files are some of the most sensitive records a district holds. VeriThreat is designed around least privilege, data minimization, and accountability.

Role-based access

Staff see only their own reports. Teams see only their school's cases. District admins manage accounts without access to student records.

Complete audit trail

Every view of a student, report, case, assessment, or attachment is logged with who, when, and from where, to support FERPA record-of-access obligations.

Data minimization

No demographic fields, by design. AI requests are pseudonymized, and districts can disable AI entirely.

Protected evidence

Photos and documents are stored outside the web root, served only to authorized users, and never cached.

Hardened sessions

Short-lived sessions, hashed tokens, strict cookies, and server-side authorization on every request.

Built for your policies

Concern categories, note types, and workflows reflect NTAC guidance and can be adapted to your district's protocol.
Read about security & privacy
FAQ

Questions districts ask us.

Something else? Talk to us.

Does VeriThreat predict which students will become violent?
+
No, and we think any product that claims to is doing something dangerous. NTAC's research found there is no profile of a student attacker. VeriThreat helps your team respond to concerning behavior someone has actually reported, and it never scores or ranks your student body.
What does the AI actually do?
+
Two things. When a report comes in, it suggests how urgently your team should look at it, which only affects queue order. On request, it organizes a student's reports and notes under NTAC's investigative themes, cites the source of every statement, and points out what's still unknown. It suggests; your team decides.
What student data do you collect?
+
Only what a threat assessment needs: name, student ID, grade, and school, synced from your student information system. We deliberately don't store race, ethnicity, religion, disability, IEP/504 status, or income, and we never request them from your SIS.
Is student data sent to the AI?
+
Only when a report is triaged or a team member runs an analysis, and only after it's minimized. Students are replaced with labels like S1 and S2, known student names are removed from free text, and IDs, birth dates, and school names are left out. Districts can also turn AI off completely.
Which student information systems do you support?
+
Any system that supports the OneRoster 1.2 standard, including PowerSchool, Infinite Campus, Skyward, Aeries, Clever, and ClassLink. CSV import is available too.
Does this replace our threat assessment team or training?
+
No. NTAC's model starts with a trained, multidisciplinary team. VeriThreat gives that team a reporting channel, a shared case file, and a consistent process. Your people, policies, and training are what keep students safe.

Every attacker in the Secret Service's study showed concerning behavior first.

Make sure the people who notice it have somewhere to go, and your team has what it needs to act.