EduGuard AI: Turning Campus Security Blind Spots Into Bullet-Proof Audit With Zero-Cloud .EDU Defenses With Google Gemma 2:2b & 4:e4b

A cybersecurity student, having recently earned a CC Certified in Cybersecurity qualification, identified a significant market opportunity for providing pre-launch security audits as a freelance service. However, three major obstacles stood in the way: FERPA compliance restrictions, enterprise alert fatigue, and the expensive cost of token-based API charges for code review prompts.

To overcome these challenges, the student developed EduGuard AI, a zero-cloud-leak application security auditor that operates locally without relying on commercial cloud APIs. This application leverages Google's open-weight Gemma models (both gemma4:e4b and gemma2:2b) running on a local Ollama daemon to perform security scans and generate FERPA-compliant remediation patches without incurring any API token costs.

The platform offers six core engines, including the Dual-Vector Inspection Engine, which combines targeted, fast scans of local repositories and live endpoints without compromising campus servers. Another key feature is the Zero-Leak Gemma Patch Synthesizer, which utilizes local Gemma models to provide unified code diffs and secure replacements offline.

To make the service user-friendly for freelancers and campus IT departments, EduGuard AI includes a FERPA/NDPR Executive Translator that converts technical vulnerabilities into plain-English liability summaries. Additionally, the Consultant-in-a-Box Exporter automates the delivery of a professional security scorecard with a letter grade, facilitating easy handover of the report to university administrators for securing paid remediation contracts.