Step 1: Request a Free Assessment
Email us or call us. Tell us about your organization and we'll schedule a discovery call at your convenience — no commitment required.
Free Cybersecurity for Canadian Nonprofits & Municipalities
Enterprise-grade cybersecurity for Canadian nonprofits and municipalities. Free or on a pay-what-you-can basis — so every organization can protect its mission, no matter the budget.
How It Works
Step 2: We Assess and Plan
Our team conducts a thorough security assessment of your network, devices, and practices. We identify vulnerabilities and prioritize risks, then present you with a clear, jargon-free report.
Step 3: We Implement and Support
We deploy security tools, harden your systems, train your staff, and set up monitoring. Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help. We remain available for ongoing questions and support after implementation.
Who We Are
Our Mission & Values
We believe every nonprofit and municipality — regardless of size or budget — deserves the same robust cybersecurity protection that large enterprises rely on. Our team brings hands-on expertise in IT security, network infrastructure, and open-source tools, all delivered as a community service.
Our Founder
Ross Moravec founded Nonprofit Tech Support after 15+ years in IT, including frontline experience at Canada Revenue Agency and ATB Financial. A certified cybersecurity professional (Cambrian College Graduate Certificate, CompTIA A+, MCSE), Ross specializes in Zero Trust architecture, SIEM, and open-source security platforms.
How Can We Help?
See all services and how they fit together
Assess your exposure
Security Scans
We scan your entire network to identify every connected device and give you a clear picture of your security posture. Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help. This is typically the first step for organizations that have never had a formal security review.
Vulnerability Assessment
Using tools like OpenVAS, we systematically probe your systems for known weaknesses before attackers can find them. You receive a clear, prioritized report so you know exactly what to fix first — no technical jargon, just actionable next steps.
Harden and recover
Security Hardening
We lock down your systems by configuring Group Policies, setting up firewalls, enforcing least-privilege access, and applying security best practices across your network. Think of it as putting strong locks on all your digital doors.
Backup and Disaster Recovery
We set up robust backup solutions using Veeam Backup and Replication Community Edition so your critical data is always protected. If a disaster or ransomware attack strikes, you will have a tested recovery plan ready to get your organization back online fast.
Open-Source Security Solutions
We deploy enterprise-grade, open-source security platforms — Wazuh for intrusion detection, Grafana for real-time dashboards, and OPNsense for firewall protection. These are the same tools used by large organizations, deployed in your environment. Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help.
Detect and respond
Network Traffic Analysis
Using Zeek, we analyze your network traffic in real time to spot anomalous behavior and potential threats. This deep visibility helps catch intrusions early, before they can cause serious damage to your organization.
Endpoint Detection and Response
We query your endpoints like a database, monitoring and investigating activity across every system in real time. This lets us detect suspicious behavior the moment it appears, giving your team the power to respond immediately.
Incident Response Automation
Using platforms like TheHive and Cortex, we automate your incident response workflows, integrate threat intelligence feeds, and coordinate actions across your organization. When a security event occurs, the response is fast, consistent, and well-documented.
People, plans and insurance
Security Awareness Training
Your staff are your first line of defence. We deliver practical, engaging training that teaches your team to spot phishing emails, handle suspicious links, and follow secure practices every day. Awareness training is often the most cost-effective security investment you can make.
Compliance and Planning
We help you understand the compliance requirements that apply to your organization and develop a practical incident response plan. Being prepared means less downtime and fewer surprises when security events occur.
Cybersecurity Insurance
Considering cyber insurance? We walk you through the prerequisites, help you meet the requirements, and guide you toward coverage that fits your organization's risk profile and budget.
Resources from Reputable Organizations
We connect you with trusted resources from CISA, the Global Cyber Alliance, and the Cyber Readiness Institute. These curated guides and toolkits give your team the knowledge to stay ahead of evolving threats.
At a glance
Federal not-for-profit
Canadian Nonprofit Tech Support is incorporated under the Canada Not-for-profit Corporations Act (corporation no. 1811493-5).
Based in Edmonton, Alberta
Our registered office is in Edmonton. We work with nonprofits and municipalities across Canada, and much of our work can be done remotely.
Free or pay-what-you-can
Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help.
Open-source tools
We deploy and recommend open-source tools such as Wazuh, OpenVAS, Zeek and OPNsense, the same platforms large organizations use.
Frequently Asked Questions
Is your service really free?
Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help.
What cybersecurity services do you offer?
We offer a full range of cybersecurity services including: network security scans, vulnerability assessments, security hardening, backup and disaster recovery setup, staff security awareness training, compliance planning, cybersecurity insurance guidance, and deployment of open-source security tools.
How long does an assessment take?
The initial assessment typically takes 1-2 weeks depending on the size of your organization and network. After that, we discuss findings with your team and prioritize the most critical issues. Implementation timelines vary by service, but most foundational security improvements can be completed within 30-60 days.
Do we need our own IT staff to work with you?
Not at all. We handle the technical implementation ourselves and explain everything in plain language. Many of the nonprofits we work with have no dedicated IT staff — that is exactly why we exist. We will work with whoever you designate as your point of contact.
Where are you based and who can you serve?
We are based in Alberta but work with nonprofits across Canada. Much of our work — including security scans, vulnerability assessments, and training — can be done remotely. For on-site deployments, we primarily serve the Edmonton and greater Alberta region.
Contact Us
Email us and we will reach out within 1–2 business days to schedule your free security assessment. Every service is free or pay-what-you-can, so cost does not decide whether your organization gets help. We serve nonprofits and municipalities across Canada.
Email us at rossm@nonprofittechsupport.ca or call (780) 860-1852. You can also write to our registered office: Brownlee LLP, 2200 Commerce Place, 10155 – 102 Street, Edmonton, Alberta T5J 4G8. More ways to reach us are on the contact page.