Funding
Where the money for this actually comes from.
Districts are told E-Rate covers cybersecurity. Some of it. The parts that stop a modern attack mostly are not. Here is what pays for what.
E-Rate vs the Pilot
Basic firewall: yes. Everything modern: no.
Under E-Rate Category 2 a basic firewall is eligible. The FCC declined to expand that again for FY2026. The separate Cybersecurity Pilot is where modern controls were funded.
| Service | E-Rate Category 2 | FCC Cybersecurity Pilot |
|---|---|---|
| Basic firewall | Eligible | Excluded |
| Advanced / next-gen firewall | No | Eligible |
| Endpoint protection | No | Eligible |
| Identity & MFA | No | Eligible |
| Monitoring, detection & response | No | Eligible |
Based on the FCC Eligible Services List and the Cybersecurity Pilot eligible services. Eligibility is reviewed annually. Confirm the current funding year with USAC before you commit a budget line.
What districts actually chose
Given a free choice, districts bought monitoring.
The Pilot is the only place districts could spend security money without E-Rate’s restrictions. What they asked for is the clearest signal in the programme.
Monitoring, detection & response
Identity protection & authentication
Endpoint protection
Advanced / next-gen firewalls
Share of Phase 2 funding requested by category. Funds For Learning analysis of FCC Cybersecurity Pilot data, December 2025.
The FCC Cybersecurity Pilot
What it is, and where it stands.
$200 million, three years
A pilot to test whether Universal Service funds should support K-12 cybersecurity. Four eligible categories: advanced firewalls, endpoint protection, identity, and monitoring.
690 participants
2,734 applications requested about $3.7 billion. 690 schools, districts, libraries and consortia were selected in January 2025. The window is closed.
If you were selected
Participants run a competitive bidding process before funds are committed. The useful conversation is scope and evaluation. Monitoring, endpoint and identity all sit inside eligible categories.
Everything else
How districts fund the rest of it.
General fund
Most districts fund monitoring and phishing defense from technology or operations lines. We quote one fixed number so it fits a line.
State programs
Several states run cybersecurity grants for districts, and the State and Local Cybersecurity Grant Program reaches districts through the state.
Cyber insurance requirements
Increasingly the trigger. When a renewal requires monitoring or testing, the premium difference often covers the service.
Purchasing cooperatives
Cooperative contracts can shorten procurement. Ask us what we hold.
Phasing it
Start with BlueHook this year, add Guardian at the next budget cycle. Nothing has to happen at once.
Title programs
Some training and student-safety components can align with existing federal title funding. Ask your business office.
We are not going to pretend to be your E-Rate consultant. We know what is eligible and we quote so it fits a budget line. Filing is your consultant’s job, and we will work alongside them.
Get started
Tell us your budget year, not your budget.
We will tell you what fits on a line, what the Pilot or a state program might cover, and what to phase.
Reply within one business day. No sales sequence, no mailing list.