Free Cybersecurity Assessment for 501(c)(3) Nonprofits
An outside-in look at your cyber exposure. Free for qualified nonprofits.
Community Edition is TitanDef's free edition for qualified 501(c)(3) organizations: external attack surface scan, inherent exposure review, peer analysis and benchmarking, and executive reporting. No credit card, no trial clock.
What Community Edition includes.
Four capabilities, run on the same engine our paid customers use — real visibility into your cyber exposure, at no cost.
External Attack Surface Scan
Continuous view of your internet-facing footprint — domains, subdomains, exposed services, and misconfigurations.
Inherent Exposure Review
Guided 20-minute review that produces a baseline cyber exposure profile grounded in your business context.
Peer Analysis & Benchmarking
See how your exposure compares to similar qualified 501(c)(3) organizations, anonymized and aggregated.
Executive Reporting
Board-ready PDF that translates exposure into language leadership and trustees can act on.
External attack surface scan
The scan looks at what an attacker sees from the outside: your domains, subdomains, exposed services, and misconfigurations. It is the same scanning engine our paid customers use, and it gives your team a plain-language list of what is visible on the internet today.
Guided 20-minute exposure review
The inherent exposure review is a guided workflow that takes about 20 minutes. No security expertise is required, and the language stays plain throughout. It produces a baseline cyber exposure profile grounded in how your organization actually operates.
Peer analysis and benchmarking
See how your exposure compares to similar qualified 501(c)(3) organizations. Benchmarking uses anonymized, aggregated data only, so no organization is ever identified, and we never sell or share your data.
Board-ready executive reporting
Your results arrive as a board-ready report that translates exposure into language leadership and trustees can act on, with a prioritized set of next steps. Results are delivered within 24 hours of your review.
Two-line eligibility.
Simple criteria, verified from public data. No financials, no board materials.
Current 501(c)(3) status
Verified against IRS and ProPublica public records. No financial statements or board materials required.
Nonprofits with an operating budget of $2M or less
Built for organizations without dedicated security staff. Larger foundations and grantmakers should see the Grantee Cyber Health program.
Need a full penetration test? Qualified nonprofits can ask about pro bono pen testing →
Managing a private foundation or grantmaker? See the Grantee Cyber Health program →
From verification to action plan in a day.
Verify your 501(c)(3)
Submit your EIN. We cross-reference IRS and ProPublica public records — most approvals in under an hour.
Run your first exposure review
Guided workflow, about 20 minutes. No security expertise required. Plain language throughout.
Get your score, benchmark, and action plan
Delivered within 24 hours. Board-ready reporting, peer comparison, and a prioritized set of next steps.
Verification uses public data only. You submit your EIN, we cross-reference IRS and ProPublica public records, and most approvals come through in under an hour. There are no financial statements or board materials to send.
Community Edition is its own edition of TitanDef, provided at no cost and sustained by our foundation partners. If you outgrow it, you can move to Starter or any paid tier at any time, and your historical exposure reviews, reports, and workspace data come with you.
Questions, answered.
Is it really free?
Yes. Community Edition is its own edition of TitanDef, provided at no cost to qualified 501(c)(3) organizations and sustained by our foundation partners. No credit card and no trial clock — it covers the external attack surface scan, inherent exposure review, peer analysis and benchmarking, and executive reporting.
What happens if we outgrow Community Edition?
You can move to Starter or any paid tier at any time to add capabilities such as the Microsoft 365 security integration, the risk dashboard, and vendor assessments. All historical exposure reviews, reports, and workspace data come with you — no migration, no lost work, no re-onboarding.
Is our data secure?
Enterprise-grade infrastructure with encryption in transit and at rest, aligned to CIS Critical Security Controls v8.1. Peer benchmarking uses anonymized, aggregated data only. We never sell or share your organization's data.
Who is eligible?
Community Edition is for 501(c)(3) nonprofits with an operating budget of $2M or less. Larger foundations and grantmakers should see the Grantee Cyber Health program.
How is eligibility verified?
Submit your EIN. We cross-reference IRS and ProPublica public records, and most approvals take under an hour. No financial statements or board materials are required.
How long does the exposure review take?
The guided inherent exposure review takes about 20 minutes. No security expertise is required, and your score, benchmark, and action plan are delivered within 24 hours.
See your exposure — on us.
If you're a qualified 501(c)(3), you'll have your workspace in under an hour.