The US Department of Education's Privacy Technical Assistance Center published a presentation titled Security Threats: Education Systems in the Crosshairs, in which security advisor Mike Tassey documented how data breaches, hacks, and privacy incidents have affected organizations across virtually every sector, from NASA and Citigroup to local school systems.

The warning is directly relevant to any organization using online proctoring. The data that proctoring services collect, including names, government-issued ID, biometric images, and session recordings, is exactly the kind of information that makes education systems a target.

The Threat Landscape Has Changed

Cyber-theft has become fully commoditized. There is an active black market for personal data, and an underground economy where over two million pieces of malware are built and sold every year. This malware is designed to gather precisely the kind of information proctoring platforms collect: Social Security numbers, addresses, birth dates, and identity credentials.

Tassey specifically noted that children's identities are particularly valued by data thieves because they are, in his words, fresh. A child's identity may go undetected for years before the theft is discovered, making it a high-value target for long-term fraud.

The alarming part is how malware typically gets onto devices. It is not usually through pirated software or poor security settings. It enters through plugins and browser extensions that users install themselves, often for legitimate purposes. The installation is the vector.

Why Proctoring Plugins Create Specific Risk

Most online proctoring services require users to install browser extensions or plugins to enable monitoring. Each of these installations represents an opportunity for malware to enter the device, either during the initial installation or through a subsequent update, without the user's knowledge or permission.

Tassey's research notes that on average there are one to five bugs for every 1,000 lines of code. For organizations that have not completed independent code reviews of the proctoring software they deploy, those bugs represent an unexamined attack surface. Malware can be introduced into code updates without detection, meaning a plugin that was clean at installation may not remain so.

At minimum, organizations should be instructing learners to disable or uninstall proctoring plugins and extensions immediately after use. The risk does not end when the exam does.

What a Code Review Should Cover

Organizations that require learners to install proctoring software should conduct, or require their vendor to provide evidence of, a code review that addresses:

• Potential malware embedded in the plugin or extension code
• Errors or vulnerabilities that could be exploited by third parties
• Whether the software receives automatic updates, and what review process governs those updates
• What data the software transmits, to where, and under what conditions

If a vendor cannot provide clear answers to these questions, the software should not be deployed on learner devices.

The Case for No-Installation Proctoring

The most effective way to eliminate installation-based security risk is to remove the installation requirement entirely. Integrity Advocate's platform is browser-based and requires no plugin, extension, or application installation in most cases. There is nothing to install, nothing running in the background after the session ends, and no update mechanism that could introduce malware without the user's knowledge.

For use cases that do require a lockdown browser, Integrity Advocate's solution uses fully open source code, does not accept automatic updates after installation, and does not transmit data beyond what is required for the session. The code is publicly available for inspection.

The US Department of Education's guidance on protecting student privacy points to the same principle: the safest data handling approach minimizes what is collected, minimizes how long it is retained, and minimizes the software footprint on learner devices.

{{post-cta}}

A waiter is taking an online assessment to earn their alcohol serving certification. They’re at home, using a personal laptop. They scan their government ID to verify their identity. And as soon as the test starts, their webcam is on. So is screen sharing.

{{post-stat-highlight}}

Here’s the thing: online assessments like these need oversight. But that doesn’t mean they need to feel like surveillance. When proctoring tools overstep, they don’t just violate privacy—they break trust, reduce engagement and risk the credibility of the certification itself.

This isn’t about watching more screens. It’s about building systems that respect boundaries, protect integrity and actually work. 

What test administrators are actually looking for

If you’re leading training, certifying professionals or managing compliance programs, chances are you didn’t wake up this morning thinking, “Let’s go shopping for proctoring software.”

What you are looking for is peace of mind. You want to:

• Make sure the right person is taking the test
• Confirm they were engaged and followed the rules
• Keep your programs compliant and your reputation protected

That’s it. You're not trying to invade someone’s personal space or collect more data than necessary—you just need reliable verification and fair oversight.

But too many platforms miss the point. They require installs that clash with IT policies, ask for broad system access, or quietly gather data that goes far beyond what's needed. And in some cases, they’ve failed to keep that data safe.

In 2020, nearly half a million user accounts from a widely used online proctoring tool—including names, email addresses, phone numbers and home addresses—were leaked after a breach. Institutions from the U.S., UK and Australia were all impacted, and the fallout was swift: student backlash, privacy concerns and institutional scrutiny from all sides.

It was a wake-up call. When proctoring crosses the line, the risks aren’t theoretical. They’re reputational—and very real.

With Integrity Advocate, privacy isn't an afterthought. It's the starting point. No excess data collection. No invasive tech. No guesswork about where that information ends up.

Because when you’re asking users to trust you with their identity, you better be ready to protect it.

Why more surveillance doesn’t mean more security

In the race to stay compliant, it’s easy to assume that collecting more data means covering more bases. But the truth is, adding layers of surveillance doesn’t make an assessment more secure—it just makes it harder to manage risk.

Think of it like airport security with no filters: scanning every bag, flagging every item and then leaving one person to sort through it all. It’s noisy, it’s overwhelming and it misses the point. 

It’s the same with proctoring. 

Tools that over-collect create a false sense of control while actually increasing privacy exposure, friction for users and administrative burden. What organizations really need is technology that collects only what’s necessary, and human context to help make sense of it. And now, that kind of clarity isn’t just a nice-to-have. It’s becoming a requirement.

The compliance standard is rising

This isn’t just about ethics. It’s about meeting the new reality of compliance.

ANSI/ASSP Z490.1-2024 raises the bar for how training is delivered and verified. It’s not enough to say a course was offered; you now need to prove it was completed by the right person, in the right conditions, with engagement that can stand up to scrutiny.

That means identity verification. Participation monitoring. Records that hold up under audit.

But nowhere in the standard does it say you need to surveil someone’s entire desktop or store unnecessary data just to meet the mark.

The spirit of ANSI Z490.1 is accountability—not overcollection. If your current system makes compliance feel more like risk exposure, it’s time to rethink what you're using to prove integrity in the first place.

Oversight ≠ Overreach

For us, this work has never just been about tech.

It started with a simple, serious belief: when it comes to safety-critical training, the integrity of an assessment isn’t optional. It’s how lives are protected. And how organizations prove they’re doing things the right way.

That’s why we approach oversight differently.

At Integrity Advocate, we’re not here to control every click. We’re here to confirm that the right people are showing up, engaging fully and earning results that matter.

We do that by designing for trust—not surveillance.

• No installs. No plug-ins. No hidden tracking.
• Only collecting what’s necessary to confirm identity and engagement.
• Human review of flagged sessions to ensure fairness, accuracy and discretion.
• Clear, transparent policies that respect the user and reduce risk for the organization.

Our goal isn’t to catch someone. It’s to build systems that make cheating irrelevant, because integrity is built in from the start.

Scale doesn’t have to come at a cost

Meeting compliance isn’t a small-scale problem. You might be onboarding thousands of learners, recertifying entire workforces or delivering credentials across dozens of jurisdictions.

The stakes are high. And so is the volume.

But here's the good news: you don’t have to trade trust for efficiency.

When Smart Serve Ontario needed to recertify tens of thousands of workers after a provincial policy shift, they didn’t have months to redesign their program or train their users. They needed a solution that scaled overnight.

By partnering with Integrity Advocate, they got:

• No software installs.
• No new platforms to learn.
• No additional support surge.

Just seamless, secure delivery that respected their learners, stood up to scrutiny and worked at scale.

That’s what smart oversight looks like. When compliance needs to move fast, you need a partner who can keep up without cutting corners.

So, where does secure proctoring end and privacy invasion begin?

It ends the moment the solution starts collecting more than it needs. It begins the second the user feels monitored instead of supported.

That’s the line.

For compliance officers, credentialing bodies and training leaders, that line matters more than ever. The tools you choose don’t just reflect your operational standards—they reflect your values.

Proctoring should confirm identity, not compromise it. At Integrity Advocate, we don’t believe you have to choose between security and simplicity or between compliance and compassion. You can have both. You should have both.

If your current solution is starting to raise questions about trust and compliance, it might be time for a conversation. We’re ready when you are.

{{post-cta}}

Not all proctoring tools work the same way. Before you compare features, pricing, or integrations, the most important decision is the model underneath the platform. If you get that wrong, everything else falls apart.

There are three approaches to online proctoring. Each has a legitimate use case. Each has a real trade-off. And one of them is consistently misunderstood as the safe middle ground when, in practice, not all hybrid models are equal.

As the market scales, programs are under more pressure than ever to choose the right model. Here is what each one actually means and what it means for your program.

The Three Proctoring Models

1. AI-Only Proctoring

AI-only platforms monitor sessions using algorithms. They track eye movement, audio patterns, browser behavior, and screen activity. When the system detects something outside expected parameters, it flags it. The report goes to your institution. Your team decides what to do with it.

The appeal is real. These tools are low cost, highly scalable, and require minimal vendor involvement. For programs running thousands of low-stakes assessments, that efficiency matters.

49% of students globally participated in online learning by March 2025 — driving demand for proctoring that scales without sacrificing accuracy. Source: Business Research Insights, 2026

The risk is also real. AI-only platforms typically flag 15 to 20 percent of all sessions. Many of those flags are not genuine integrity violations. Without a human reviewing the flag before it reaches your inbox, your team is doing that work. The savings on the tool often do not account for the time your staff spends sorting through incidents.

"When a result is challenged, the answer 'the algorithm flagged it' is not a defensible audit trail."

For programs where outcomes carry weight, that gap is a liability.
AI-only works when stakes are low, volume is high, and your institution has capacity to review flags internally.

2. Live Human Proctoring

Live proctoring puts a trained human proctor in the session in real time. The proctor monitors the exam as it happens, can communicate with the test taker, and can intervene if something goes wrong.

The accuracy is high. The human judgment is present. The audit trail is strong. For high-stakes licensing exams, certification bodies with regulatory requirements, and professional credentials where disputes are foreseeable, live proctoring has historically been the answer.

The trade-offs are scheduling and cost. Test takers need to book a time slot. Proctors need to be available. Per-session pricing adds up quickly at scale. For programs delivering hundreds or thousands of exams across flexible windows, the logistics become unworkable.

48% Of students expressed discomfort with webcam-based monitoring during exams — a signal that the model you choose directly affects learner trust in your program. Source: Business Research Insights survey, 2023

Live proctoring is also more intrusive for the learner. Being watched in real time creates anxiety that can affect performance. For programs that care about the experience of their test takers, that friction is worth accounting for.
Live proctoring works when stakes are high, volume is manageable, scheduling is structured, and real-time intervention is a non-negotiable requirement.‍

3. Hybrid Proctoring: The Model That Varies Most

Hybrid proctoring combines AI monitoring with human review. In principle, it offers the best of both approaches. In practice, it depends entirely on one question: when does the human review happen, and is it mandatory?

Many platforms that describe themselves as hybrid use AI for detection and offer human review as an optional tier or a paid escalation. That is not a genuine hybrid. It is AI-only with an appeal process.

Integrity Advocate is built on this model. Human review is not an upgrade.

Hybrid proctoring with mandatory human review delivers scale without shifting the review burden to your institution.

The Question to Ask Every Vendor

When a flag is raised, who reviews it, and when?

If the answer is your team reviews it, or a human reviews it if you escalate, you are looking at AI-only with extra steps. If the answer is our reviewers examine every flag before it becomes an outcome, you are looking at a genuine hybrid. That question takes 30 seconds and tells you more than a 90-minute demo will.

{{post-cta}}