Free tool

CISA free cybersecurity services and tools

US government's free scanning services and catalogue of no-cost security tools.

Visit site ↗Pricing ↗

Solid optionValuable free US government scans and tools, but US-only and self-directed.

See how CISA free cybersecurity services and tools fits your setup. Add the tools you already use.

Price

Free

Nonprofit offer

None found

Available in

🇺🇸United States onlyFree scanning is for US organisations only

Suits

Volunteer-run · Small · Medium · Large

Great for

US nonprofits wanting a free list of vetted security tools and guidance
Nonprofits that run critical services and may qualify for scanning
Free
Official US government source
Catalogue links to many other free tools

Watch out for

Organisations outside the US
Charities expecting guaranteed free scanning (nonprofit eligibility is not stated)
Scanning eligibility does not clearly include ordinary nonprofits
Needs technical staff to act on reports
US only; availability of programmes can change

Problems it solves

“Is there free cybersecurity help for US nonprofits?”“Can we get our website scanned for weaknesses for free?”“Where do I find a list of free security tools?”“We think we are a target and need free guidance”

About CISA free cybersecurity services and tools+

CISA, the US Cybersecurity and Infrastructure Security Agency, offers free vulnerability and web application scanning, and keeps a catalogue of no-cost security services and tools from government and industry. The scanning services are aimed at government and critical-infrastructure organisations, and nonprofits are not named as eligible. Nonprofits can still use the catalogue and CISA's page of resources for high-risk communities.

Pricing: CISA says its Cyber Hygiene services (vulnerability scanning and web application scanning) are no cost. Eligibility is stated as US federal, state, local, tribal and territorial governments plus public and private critical-infrastructure organisations; nonprofits are not named. The catalogue and the high-risk-communities resource page are open to anyone.

Key features+

Cyber Hygiene vulnerability scanning with weekly reportsWeb application scanningCatalogue of no-cost services and tools filtered by readiness levelResource page for high-risk communities and nonprofits, including NGO-ISAC and the Global Cyber Alliance toolkit

Data & privacy+

Services are provided by a US government agency; scanning requires you to share your internet-facing addresses.

How sure are we?+

Partly confirmed on the vendor's pages; some details from reputable secondary sources. Prices and nonprofit programs change often, so check with CISA free cybersecurity services and tools before you commit. Rankings on Nonprofit Tools are never for sale.

Sources · last checked 2026-10-02