See it coming.

The adversaries targeting civil society plan ahead. Our programs exist so the people defending it see what is coming, and are ready when it arrives.

Why they exist

Most civil society organizations face serious digital threats with small security teams, or with no team at all: one person doing security alongside three other jobs. Everything we run is built for that person. It tells them what is coming before it arrives, and it helps them do something about it with the time and budget they have.

Underneath all of it is one idea. A threat seen by one organization should protect every other organization. Members share what they see, the community turns it into warning for everyone, and the attack that worked once stops working.

How threat sharing works: one organization sees it, the community turns it into warning, every organization is protected before the same attack reaches them.

What that means

  • We share threats, every week, so no member finds out alone.
  • We train for results, so a session ends with the work done rather than described.
  • We coach one on one, so a team of one has someone to sit with.
  • We bring everyone into one room, once a year, so the people who are targeted and the people who can help meet face to face.

Where this goes

The measure of this work is the attack that failed because someone saw it coming. The next step is reaching the organizations that have never had a security person and never will, and are targeted anyway, and bringing more of the people who see the most, in government and industry, into the room with the people who need them. No one protects civil society alone.