Securva · Sector BriefDraft · aggregate · no-name-shame
The classroom
has no lock.
Of every sector we measure in Nigeria, private universities are the single most exposed — and it's students' data sitting behind the open door.
The headline: across 52 Nigerian private universities we measured, only ~12.7% of their live sites enforce a basic secure connection — the lowest of any sector in the country. 33 of them score a flat zero. This is measured, publicly-observable, and anyone can verify it.
12.7%
avg HSTS — lowest sector
1What this means, plainly
"Enforcing a secure connection" (HSTS) is the basic control that stops a student's traffic from being silently intercepted. When it's absent, the login where a student types their password, the portal that holds their results and records, the page where fees are paid — all of it can be exposed in transit. At 12.7%, and with a third of schools at zero, most Nigerian university sites don't enforce it at all. And universities hold exactly the data attackers want: names, dates of birth, addresses, ID numbers, payment details — for tens of thousands of young people each.
2Why it matters — this is how breaches actually happen
Nigeria's real-world breaches almost never come from sophisticated hackers — they come from open doors: exposed databases, missing authentication, unpatched systems, no encryption. (We've mapped those incidents separately.) A sector this weak, holding this much student data, under a data-protection law (NDPA) that now carries fines up to ₦10m or 2% of revenue, is a textbook target. The exposure isn't theoretical — it's the exact profile that gets breached.
3The good news: it's fixable, cheaply
Because the problem is basic hygiene, the fix is fast and cheap — not a fortune, not a year-long project. Enforcing HTTPS, patching known issues, closing exposed panels, adding the missing headers: a focused clean-up, not a rebuild. This is a weekend of discipline, not a budget crisis. That's the honest, hopeful message — the door just needs a lock, and the lock is affordable.
4How Securva fits
We didn't guess this — we measured it, passively, from public data, and anyone can re-check a single school in seconds. We can tell any university exactly which of their doors are open and close them before someone walks through — a quick, no-charge look first, a focused fix after. We measure the problem, prove it, and fix it.
5Our discipline (why this is safe to publish)
This brief reports the sector in aggregate — no university is named or shamed. We hold the specific findings privately and share them directly and confidentially with each institution, as help, never as a threat. The data is passive and publicly-observable; the intent is to get doors closed, not to embarrass anyone. We're the doctor with the X-ray, not the ambulance chaser.