In-kind cybersecurity grants

To Keep The Nation Safe by Closing the Cybersecurity Divide

Providing grants, resources, and in-kind certification support to strengthen our defenses and keep the Nation safe.

Apply for Grants Schedule a Consultation

Our Goals

Real protection for real businesses

1,200+Businesses to Protect
50States to Reach

Grant programs

Our Grant Portfolio

Five programs to protect your business

All grant programs

In-Kind (one-time)

CMMC Level 1 Gap Assessment Grant

An in-kind Level 1 gap assessment that evaluates all 15 basic safeguarding requirements of FAR 52.204-21, covering the 6 Level 1 control families, for organizations handling Federal Contract Information (FCI).

Once approved, you are connected with an independent certified assessor who will coordinate the assessment timeline with your team.

You receive your gap identification with prioritized findings, so you know where you stand before your annual self assessment.

Full evaluation of all 15 CMMC Level 1 requirements
Gap identification across all 6 Level 1 control families
Prioritized list of compliance gaps by severity
A clear picture of your self assessment readiness

In-Kind (one-time)

CMMC Level 2 Gap Assessment Grant

An in-kind Level 2 gap assessment that evaluates all 110 NIST SP 800-171 controls against your actual environment, for organizations handling Controlled Unclassified Information (CUI).

Once approved, you are connected with an independent certified assessor who will coordinate the assessment timeline with your team.

You receive your gap identification with prioritized findings, so you know where you stand against all 110 controls.

Full evaluation of all 110 NIST SP 800-171 controls
Gap identification across all 14 control families
Prioritized list of compliance gaps by severity
Clear picture of your current compliance posture

In-Kind (yearly)

Employees Cyber Training Grant

Human error remains one of the leading causes of cyber incidents, with employees often targeted through phishing, social engineering, and other deceptive tactics.

Without ongoing cybersecurity training, organizations remain vulnerable to breaches that can lead to financial loss and reputational damage.

Comprehensive training programs, featuring phishing simulations, security awareness modules, and incident response procedures, empower staff to recognize and respond to threats effectively. By reinforcing secure behavior and tracking performance over time, this service helps build a resilient security culture that protects the entire organization.

Security training modules
Phishing simulations
Incident response training
Performance metrics tracking

In-Kind (one-time)

Silver CyberCert Certification

Many organizations, especially small and mid-sized businesses, lack the resources to pursue recognized cybersecurity certifications that demonstrate trust and compliance.

Without proper guidance and validation, they face greater challenges meeting industry standards, securing contracts, and qualifying for cyber insurance.

The CyberCert Silver Certification Grant helps close this gap by providing a sponsored Silver certification credit and full access to the CyberCert Platform, offering an affordable, structured pathway to strengthen security posture and ensure new business opportunities through security-minded social proof.

Guided Assessment
Full CyberCert Platform Access
Official Certification
Certification Resources

In-Kind (one-time)

Gold CyberCert Certification

Organizations operating in compliance-heavy industries such as finance, healthcare, and retail face increasing regulatory pressure to formalize their cybersecurity practices.

Many lack the internal governance, documentation, and employee awareness needed to meet these stringent requirements, leaving them exposed to compliance risks and potential data breaches.

The CyberCert Gold certification helps close this gap by introducing structured security governance, including policies, data protection controls, asset management, and incident response protocols, building the essential foundation for long-term cyber resilience and regulatory readiness.

Cybersecurity Policies
Data Protection
Digital Asset Registers
Incident Response

Apply For Grants

Why Apply?

Small Businesses Are the #1 Target

Cybercriminals specifically target small and medium-sized businesses because they often lack the resources and expertise to defend themselves effectively. The average ransomware attack costs $400,000 or more, money most SMBs don’t have.

CGA removes the financial barrier to defense, so your business can focus on growth, not vulnerability.

Learn More About Our Grants