Cybersecurity Resources for High-Risk Communities
A catalog of cybersecurity resources for high-risk communities curated by CISA in partnership with Joint Cyber Defense Collaborative (JCDC) participants and other leaders in cybersecurity and civil society.
As America’s cyber defense agency, CISA—through JCDC—has compiled a list of cybersecurity resources intended to help high-risk communities who are at heightened risk of being targeted by cyber threat actors because of their identity or work.
Navigating the Tools and Resources on this Page
The resources on this webpage are broken into three main categories:
1. Customized Tools to Assess and Mitigate Risk. You can use the resources in this section to assess your current cybersecurity capabilities and level of risk, then create plans to improve your digital security. Refer to the resources for individuals if you want to improve your personal cyber defenses. Check out the resources for organizations if you’re an organization that wants to identify free cybersecurity solutions to mature your organization’s cybersecurity practices.
2. Helplines and Communities. This section highlights organizations that may assist in the event of a digital emergency, as well as communities for nonprofits, ranging from informal networks for exchanging best practices, to formal information sharing networks.
- Free Helplines and Communities
- Information Sharing and Analysis Centers
3. Tools and Services to Strengthen Your Cyber Defenses. This section includes tools and services that may enhance your digital security. These tools are available to high-risk communities for free or at a discounted rate.
- Free Tools and Services for High-Risk Communities
- Free Tools and Services for High-Risk Communities with Pre-existing Paid Products/Services
- Reduced Cost Tools and Services for High-Risk Communities
1. Free Customized Tools to Assess and Mitigate Risk
For Individuals
CISA | Project Upskill
Adopt simple steps to protect yourself against targeted cyberattacks.
JCDC Cyber Incident Exercise Discussion
Test your readiness to respond to a targeted cyberattack by completing a series of cybersecurity scenarios.
Consumer Reports | Security Planner
Develop a plan to protect your personal data.
PEN America | Digital Safety Snacks
Learn how to improve your privacy online, secure important accounts, and adopt other digital security best practices.
Global Cyber Alliance | Cybersecurity Toolkit for Journalists
Select free tools and services to assess and enhance your cybersecurity posture through a guided process.
National Democratic Institute | Digital Organizing SOS
Learn how to communicate, assemble, fundraise, and protect data while engaging in digital advocacy.
Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society
Learn how to mitigate cyber threats with limited resources to protect civil society.
Amnesty International | Digital Security Resource Hub for Civil Society
Amnesty International's Resource Hub makes it easier to identify accessible, high quality, updated and free advice and resources to support civil society with building and protecting their digital resilience.
For Organizations
Ford Foundation | Cybersecurity Assessment Tool
Assess your organization’s cyber maturity, strength, and resilience and take actionable steps to improve elements of your cybersecurity program.
Global Cyber Alliance | Cybersecurity Toolkit for Mission-Based Organizations
Select free tools and services to assess and enhance your cybersecurity posture through a guided process.
NetHope | Data Governance Toolkit
Develop or improve your data governance plan using these templates.
NTEN | Tech Accelerate
Use this free assessment tool to evaluate your organization’s technology adoption, practices, and policies.
2. Helplines and Communities
Free Helplines and Communities for High-Risk Communities
Access Now | Digital Security Helpline
Access Now provides rapid emergency response and cybersecurity advice free-of-charge to civil society groups, activists, media organizations, journalists, bloggers, and human rights defenders.
The Citizen Lab, University of Toronto | The Citizen Lab
If you are a member of civil society that has been notified that you might have been targeted by advanced spyware, you may be considered for enrollment in research with Citizen Lab.
Cisco | no-spyware@external.cisco.com
Cisco accepts outreach from high-risk individuals and organizations if they believe they have been compromised by advanced spyware. Requests for assistance can be submitted to no-spyware@external.cisco.com.
CiviCERT | Digital First Aid Kit
Individuals and organizations that are experiencing a digital emergency can use the Digital First Aid Kit to identify additional helplines that they can reach out to depending on their situation.
NTEN | Community Groups
NTEN hosts online communities with hundreds of participants so that nonprofits can learn from each other as they begin their digital transformation and cybersecurity journeys.
Amnesty International | Security Lab Digital Forensics Helpline
Security Lab's free Digital Forensics Helpline supports human rights defenders, activists, journalists & other civil society members. Contact the helpline if you believe your accounts or devices have been targeted by spyware or other digital threats.
Information Sharing and Analysis Centers for High-Risk Communities
NGO-ISAC | NGO-ISAC Membership
NGO-ISAC is a nonprofit that elevates the cybersecurity posture of US-based nonprofits through information sharing, training and education programs, and specialized cybersecurity consulting services, all tailored to empower and protect nonprofits.
NetHope | NetHope Membership
NetHope provides nonprofit members with tools, training, grants, a vCISO service, and guidance to raise their cybersecurity baseline. Its community works to address shared priorities, provides mutual aid, and shares actionable threat intelligence.
3. Tools and Services to Strengthen your Cyber Defenses
Free Tools and Services for High-Risk Communities
Google | Advanced Protection Program
Activate Google APP protections for free on your Gmail account to safeguard against phishing, malware, and data leakage.
Cloudflare | Project Galileo
Cloudflare offers free security services to organizations supporting the arts, human rights, journalism, and democracy.
Yubico | Yubico "Secure it Forward"
Secure it Forward program was established to provide security keys to help those most at-risk improve their authentication posture. Individuals in specific organizations and fields can apply to receive a free YubiKeys.
Authentic8 | Silo Shield
High-risk communities, including journalists, academics, and humanitarian workers, can apply for access to Silo for Research, a platform that protects users’ identities from digital threats while conducting online research.
iVerify | iVerify Elite Pro Bono Access for Civil Society
Civil society organizations are eligible for reduced price or pro bono access to iVerify EDR to safeguard against spyware, credential theft, vulnerabilities, and smishing, all while respecting user privacy.
Lookout | Free Security Posture Assessments
Take Lookout’s free security posture assessments to identify gaps in your cyber defenses and receive actionable recommendations to make your organization more secure.
CISA | Secure Our World
Simple ways to protect yourself, your family and your business from online threats.
Free Tools and Services for High-Risk Communities (Requiring a Pre-existing Paid Service)
Apple | Lockdown Mode
Turn on Lockdown Mode if you own an Apple device and believe you are at high-risk of being targeted by the most grave types of mercenary spyware because of who you are or what you do.
Microsoft | AccountGuard
AccountGuard offers added protections to Microsoft 365 accounts, cybersecurity best practice guidance, nation-state threat notifications, and other resources. It is free to organizations that underpin a healthy democracy, including nonprofits.
Apple | Advanced Data Protection for iCloud
Apple also recommends those seeking the highest level of cloud data security choose Advanced Data Protection for iCloud.
Reduced Cost Tools and Services for High-Risk Communities
Tech Soup | Digital Assessment Tool
Identify gaps in your digital ecosystem and find popular products available to nonprofits for low-to-no cost. NOTE: CISA does not endorse any commercial product, service, or company referenced in the output of the Tech Soup Digital Assessment Tool.
Optery | Personal Data Removal
Optery offers free and discounted services for high-risk groups to find and remove exposed personal information from the internet, significantly reducing the risk of both cyber and physical threats.
Do you have something to add?
If you are aware of a cybersecurity tool or service that can enhance the cyber resilience of high-risk communities, please submit a request for consideration to cisa.jcdc@cisa.dhs.gov.
DISCLAIMER: The Cybersecurity Resources for High-Risk Communities list is not comprehensive and is subject to change pending future additions. CISA applies neutral principles and criteria to add items and maintains sole and unreviewable discretion over the determination of items included. CISA does not attest to the suitability or efficacy of these services and tools for any particular use case. CISA does not endorse any commercial product or service. Any reference to specific commercial products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply their endorsement, recommendation, or favoring by CISA.