Free Cybersecurity for Canadian Nonprofits & Municipalities
We protect Canadian nonprofits and municipalities with enterprise-grade cybersecurity — at no cost or on a pay-what-you-can b
We protect Canadian nonprofits and municipalities with enterprise-grade cybersecurity — at no cost or on a pay-what-you-can b
Fill out our short form or give us a call. Tell us about your organization and we'll schedule a discovery call at your convenience — no commitment required.
Our team conducts a thorough security assessment of your network, devices, and practices. We identify vulnerabilities and prioritize risks, then present you with a clear, jargon-free report.
We deploy security tools, harden your systems, train your staff, and set up monitoring — all at no cost. We remain available for ongoing questions and support after implementation.

We believe every nonprofit and municipality — regardless of size or budget — deserves the same robust cybersecurity protection that large enterprises rely on. Our team brings hands-on expertise in IT security, network infrastructure, and open-source tools, all delivered as a community service. If your organization needs help strengthening its security, reach out and we will work with you to find the right solution.

Ross Moravec founded Nonprofit Tech Support after 15+ years in IT, including frontline experience at Canada Revenue Agency and ATB Financial. A certified cybersecurity professional (Cambrian College Graduate Certificate, CompTIA A+, MCSE), Ross specializes in Zero Trust architecture, SIEM deployment, and Microsoft 365 security. He leads a volunteer-driven team delivering enterprise-grade protection to nonprofits and municipalities at no cost. His mission: ensure no organization is left vulnerable because of budget constraints.

We exist to give nonprofits and municipalities the same caliber of cybersecurity that large enterprises enjoy. By pairing open-source tools with hands-on guidance, we help organizations protect their data, train their teams, and fulfill their missions without fear of cyber threats.

Everything starts with a free security assessment. From there, we offer network security scans, vulnerability testing, staff awareness training, incident response planning, and the deployment of open-source security tools. Every program is designed to be affordable and accessible for organizations of any size.

We have helped nonprofits across Alberta and beyond identify and remediate critical vulnerabilities, harden their networks, and train their staff — all at zero cost. Every organization we serve gains the same level of protection that Fortune 500 companies pay thousands for.
We scan your entire network to identify every connected device and give you a clear picture of your security posture — all at no cost. This is typically the first step for organizations that have never had a formal security review.
Using tools like OpenVAS, we systematically probe your systems for known weaknesses before attackers can find them. You receive a clear, prioritized report so you know exactly what to fix first — no technical jargon, just actionable next steps.
We deploy enterprise-grade, open-source security platforms — Wazuh for intrusion detection, Grafana for real-time dashboards, and OPNsense for firewall protection. These are the same tools used by large organizations, deployed for free in your environment.
We lock down your systems by configuring Group Policies, setting up firewalls, enforcing least-privilege access, and applying security best practices across your network. Think of it as putting strong locks on all your digital doors.
We set up robust backup solutions using Veeam Backup and Replication Community Edition so your critical data is always protected. If a disaster or ransomware attack strikes, you will have a tested recovery plan ready to get your organization back online fast.
Your staff are your first line of defence. We deliver practical, engaging training that teaches your team to spot phishing emails, handle suspicious links, and follow secure practices every day. Awareness training is often the most cost-effective security investment you can make.
We help you understand the compliance requirements that apply to your organization and develop a practical incident response plan. Being prepared means less downtime and fewer surprises when security events occur.
Considering cyber insurance? We walk you through the prerequisites, help you meet the requirements, and guide you toward coverage that fits your organization's risk profile and budget.
We connect you with trusted resources from CISA, the Global Cyber Alliance, and the Cyber Readiness Institute. These curated guides and toolkits give your team the knowledge to stay ahead of evolving threats.
Using Zeek, we analyze your network traffic in real time to spot anomalous behavior and potential threats. This deep visibility helps catch intrusions early, before they can cause serious damage to your organization.
We query your endpoints like a database, monitoring and investigating activity across every system in real time. This lets us detect suspicious behavior the moment it appears, giving your team the power to respond immediately.
Using platforms like TheHive and Cortex, we automate your incident response workflows, integrate threat intelligence feeds, and coordinate actions across your organization. When a security event occurs, the response is fast, consistent, and well-documented.
Critical security gaps found and fixed — before attackers could exploit them.
We provide all services on a free (pro-bono) or pay-what-you-can basis, ensuring every nonprofit can access enterprise-grade protection regardless of budget.
Enterprise-grade security deployed across nonprofit and municipal networks, from endpoint detection to SIEM monitoring.
The people served by the organizations we protect — staff, clients, donors, and residents who depend on secure systems.
Have a question we haven't answered here? Email us at rossm@nonprofittechsupport.ca or call (780) 860-1852.
Yes, completely. Our initial security assessment costs your organization nothing. We are a volunteer-driven initiative dedicated to making enterprise-level cybersecurity accessible to nonprofits who cannot afford it. There are no hidden fees, contracts, or upsells.
We offer a full range of cybersecurity services including: network security scans, vulnerability assessments, security hardening, backup and disaster recovery setup, staff security awareness training, compliance planning, cybersecurity insurance guidance, and deployment of open-source security tools like Wazuh and OPNsense.
The initial assessment typically takes 1-2 weeks depending on the size of your organization and network. After that, we discuss findings with your team and prioritize the most critical issues. Implementation timelines vary by service, but most foundational security improvements can be completed within 30-60 days.
Not at all. We handle the technical implementation ourselves and explain everything in plain language. Many of the nonprofits we work with have no dedicated IT staff — that is exactly why we exist. We will work with whoever you designate as your point of contact.
We are based in Alberta but work with nonprofits across Canada. Much of our work — including security scans, vulnerability assessments, and training — can be done remotely. For on-site deployments, we primarily serve the Edmonton and greater Alberta region.
Fill out the form and we will reach out within 1–2 business days to schedule your free security assessment. No obligation, no contracts, no cost — ever. We serve nonprofits and municipalities across Canada.
Ross Moravec (780) 860-1852 rossm@nonprofittechsupport.ca
Mon | 09:00 a.m. – 05:00 p.m. | |
Tue | 09:00 a.m. – 05:00 p.m. | |
Wed | 09:00 a.m. – 05:00 p.m. | |
Thu | 09:00 a.m. – 05:00 p.m. | |
Fri | 09:00 a.m. – 05:00 p.m. | |
Sat | Closed | |
Sun | Closed |
We use cookies and Google reCAPTCHA to improve your experience and protect our forms. By accepting, you consent to analytics cookies that help us understand how visitors use our site. Declining will not affect your ability to use this site. See our Privacy Policy for details.