Grants

In-Kind Cybersecurity Grants for Small Businesses

Learn how to access in-kind grants to improve your cybersecurity posture. The CGA grant program and CMMC Gap Assessment grants are provided at no cost to eligible businesses.

How an in-kind cybersecurity grant worksStep 1, you apply online. Step 2, Cyber Grants Alliance matches you to a grant. Step 3, an approved provider does the work. Step 4, you receive the results at no cost to you.1You applyonlineOne application withCyber Grants Alliance.It asks about yourbusiness and what youneed.2CGA matchesyou to a grantA reviewer fits yourbusiness to the grantthat suits it, such asa CMMC gap assessment.3An approvedprovider doesthe workThe service isdelivered in-kind, soa sponsor partnercovers the work andyou do not pay for it.4You receivethe resultsYou get what the grantcovers, such as aprioritized list ofgaps, at no cost toyou.How an in-kind cybersecurity grant worksStep 1, you apply online. Step 2, Cyber Grants Alliance matches you to a grant. Step 3, an approved provider does the work. Step 4, you receive the results at no cost to you.1You apply onlineOne application with Cyber GrantsAlliance. It asks about your businessand what you need.2CGA matches you to agrantA reviewer fits your business to thegrant that suits it, such as a CMMCgap assessment.3An approved providerdoes the workThe service is delivered in-kind, so asponsor partner covers the work andyou do not pay for it.4You receive the resultsYou get what the grant covers, such asa prioritized list of gaps, at no costto you.

Many small businesses do not realize that in-kind grants exist to help them improve their cybersecurity. Cyber Grants Alliance (CGA), a nonprofit, runs five in-kind programs with sponsor partners. In-kind means the grant is a service: an approved provider does the work and you do not pay for it.

What does a CGA grant cover?

CGA lists five programs on its grant programs page (Cyber Grants Alliance: Grant Programs):

  • CMMC Level 1 Gap Assessment, for organizations that handle Federal Contract Information
  • CMMC Level 2 Gap Assessment, for organizations that handle Controlled Unclassified Information
  • Cybersecurity Training, with security training modules, phishing simulations and incident response training
  • Silver CyberCert Certification
  • Gold CyberCert Certification

What does a grant not cover?

Each grant covers the service it names. The Level 2 gap assessment, for example, does not include a detailed written assessment report, C3PAO readiness preparation, a remediation roadmap or a Plan of Action and Milestones. Those are available separately from the sponsor (Cyber Grants Alliance).

Who can apply?

CGA reviews eligibility from your business size, industry and compliance needs. Defense contractors that handle Federal Contract Information or Controlled Unclassified Information look at the CMMC gap assessment grants. See CMMC gap assessment grants for who they suit.

How do I apply?

You apply once on the CGA website, and CGA matches you with the program and sponsor that fit. Start the application, or see how the grants work.

Last reviewed:

Ready to close your cybersecurity gap?

Start with a grant application if budget is the blocker, or talk to a specialist if you are ready to buy.