National Cybersecurity Alliance

What National Cybersecurity Alliance does

National Cybersecurity Alliance (NCA) is a 501(c)(3) nonprofit organization founded in 2001 (EIN 37-1861631), headquartered in Winston-Salem, North Carolina with a Washington, DC presence. The organization is the recognized U.S. authority on cybersecurity awareness and education, co-leading Cybersecurity Awareness Month with CISA every October and operating Data Privacy Week each January. NCA's core product is the Stay Safe Online digital resource portal (staysafeonline.org), which distributes free articles, videos, infographics, and downloadable toolkits under CC BY-NC-SA 4.0 licensing to individuals, small and medium businesses, students, older adults, and enterprise security awareness teams.

The organization's product portfolio extends beyond the portal to include the biannual Convene conference (focused on human risk management), the Champions program (a network of thousands of organizations distributing NCA content), audience-specific campaigns (CyberSecure My Business for SMBs, See Yourself in Cyber for career changers, Then & Now for older adults, AI Fools and Safe Word for AI-scam awareness, Kubikle comedy series, Phisher romance-scam simulator), and the annual Oh Behave! research report produced with CybSafe based on a five-year survey of 25,000+ adults. Underlying technology is primarily content production and web distribution rather than a productized software stack; the proprietary technical asset is the behavioral dataset from the Oh Behave longitudinal study.

NCA's business model is a hybrid nonprofit funding structure with four revenue streams: (1) event revenue from Convene conference ticket sales via Cvent, (2) corporate event sponsorships where sponsors receive attendee data and visibility, (3) donations and grants from foundations and individuals, and (4) cy pres / residual-fund awards from data-breach and privacy class action settlements (including Sanders v. Ibex, Lundy v. Meta, Medina v. Albertsons, AFNI, Mednax). The go-to-market motion is community-led — mobilizing Champions to distribute resources — combined with event-driven engagement (Convene) and direct-to-consumer content distribution through staysafeonline.org and a 40,000+ subscriber newsletter. Revenue is not publicly disclosed.

Name

National Cybersecurity Alliance

Legal name

National Cybersecurity Alliance

Website

https://staysafeonline.org

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

National Cybersecurity Alliance is a 501(c)(3) nonprofit founded in 2001 that delivers free cybersecurity and privacy education to individuals, businesses, and government through its Stay Safe Online portal, Cybersecurity Awareness Month (co-led with CISA), Data Privacy Week, and the Convene conference.

Ownership category

akta.pro rank

Product category

Cybersecurity Education and Awareness

NAICS

Business Associations (813910)

SIC

Services-Membership Organizations (8600)

akta.pro primary industry

General Cybersecurity Awareness (All Employees) (EDABAGAA)

akta.pro secondary industries

Cybersecurity Learning Platforms (EDAFANAF), Cybersecurity Training & Awareness Programs (BPAEANAF), Cybersecurity (General) (EDAOAIAB)

Keywords

• Cybersecurity education
• Online safety awareness
• Data privacy training
• Cyber threat prevention
• Security awareness programs

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D, Others

Revenue model

1. Event Revenue: NCA generates revenue through ticket sales for its Convene conference events, which are held in cities such as Boston. The conference attracts cyber professionals and security awareness managers as paying attendees.
2. Corporate Sponsorships: NCA partners with corporate sponsors for its events and initiatives. Event sponsors receive attendee lists including names, emails, and company information, providing a GTM value proposition for sponsors seeking access to cybersecurity professionals.
3. Donations and Grants: As a registered 501(c)(3) nonprofit organization (EIN: 37-1861631), NCA accepts donations and may receive grants to support its mission of providing free digital security and privacy education to the American public.
4. Cy Pres Awards: NCA accepts cy pres and residual-fund awards from privacy, data-breach, and consumer-protection class action litigation settlements. These funds support NCA's core public-service work including free security and privacy education programs.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels8 records

Core offering

The National Cybersecurity Alliance is a 501(c)(3) nonprofit that provides free cybersecurity and data privacy education to individuals, businesses, and organizations through its Stay Safe Online platform and flagship awareness programs. It distributes articles, videos, infographics, and downloadable toolkits, and operates signature initiatives including Cybersecurity Awareness Month (co-led with CISA), Data Privacy Week, and the biannual Convene conference. Its offering is rounded out by the CyberSecure My Business program for SMBs, the See Yourself in Cyber career pipeline initiative, and interactive awareness campaigns such as Phisher, AI Fools, Kubikle, Safe Word, and Then & Now.

Product overview

National Cybersecurity Alliance is a nonprofit that provides a comprehensive portfolio of free cybersecurity education resources and awareness initiatives. The core offering is the Stay Safe Online Resource Portal featuring articles, videos, and toolkits. Key initiatives include Cybersecurity Awareness Month (October), Data Privacy Week (January), and the Convene conference series. Additional programs include CyberSecure My Business for small businesses, See Yourself in Cyber for career development, AI Fools for AI scam awareness, Kubikle (comedy web series), Then & Now for older adults, Phisher (romance scam simulator), Safe Word (AI voice scam protection), Cyber Survival Guide (tip sheets), and the annual Oh Behave! research report. All resources are free and available under CC BY-NC-SA 4.0 licensing.

Differentiator

Problem solved

Functional benefit

Brands

• AI Fools: An awareness campaign on AI-enabled scams & responsible AI use.
• Convene
• Data Privacy Week
• Cybersecurity Awareness Month
• CyberSecure My Business
• See Yourself in Cyber
• Kubikle
• Then & Now

Products and services

• Stay Safe Online Resource Portal

Quantifiable outcome

• Programs reach millions of individuals and organizations annually through Cybersecurity Awareness Month and Data Privacy Week
• +3 more outcomes

Segments5 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Seven partnerships are on record, tiered core, major and minor.

• CISA (Cybersecurity and Infrastructure Security Agency)coreStrategic or Co-development PartnerCISA co-leads Cybersecurity Awareness Month with NCA every October. This is a flagship global initiative that mobilizes organizations across government, enterprise, and consumer sectors to promote cybersecurity best practices. The partnership represents the highest-level government collaboration on cybersecurity awareness in the United States.
• CSA (Cloud Security Alliance)coreStrategic or Co-development PartnerCSA co-leads Cybersecurity Awareness Month 2024 with NCA and CISA. The partnership leverages CSA's enterprise cybersecurity membership and expertise to extend reach to security professionals and organizations.
• CybSafecoreStrategic or Co-development PartnerNCA partnered with CybSafe to release the five-year Oh Behave Cybersecurity Attitudes and Behaviors Report (2021-2025), analyzing cybersecurity behaviors among more than 25,000 adults. CybSafe provides the behavioral data and analytics that power NCA's annual research publication.
• GooglemajorGTM or Marketing PartnerGoogle partnered with NCA for broader cybersecurity awareness, including launching an educational game to teach users about scam tactics. Google also integrated NCA resources alongside its security tools, extending reach to Google's massive user base.
• CivAImajorStrategic or Co-development PartnerNCA partnered with CivAI, a nonprofit organization, to create the 'We Need to Talk' voice-activated simulation as part of the Safe Word campaign. This collaboration enables NCA to offer interactive AI scam simulation experiences that test users' ability to navigate high-pressure AI encounters.
• Event SponsorsmajorGTM or Marketing PartnerNCA event sponsors provide financial support for Convene conferences in exchange for visibility and access to attendee data (names, emails, company information). Sponsors make the events possible and gain GTM value through exposure to cybersecurity professionals.
• Class Action Plaintiffs (Cy Pres Recipients)minorOthersNCA serves as a cy pres recipient in data-privacy and data-breach class action settlements, including Sanders v. Ibex Global Solutions, Lundy et al. v. Meta Platforms Inc., Medina v. Albertsons, Perez et al v. Carvin Wilson Software LLC, Lockridge v. Qualified Temporary Services Inc., AFNI Data Incident Settlement Fund, and Mednax Services, Inc.

Scale indicators10 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Center for Internet Security (CIS): Nonprofit that delivers free cybersecurity best-practice resources, controls, and awareness toolkits to organizations of all sizes. Closely comparable as a U.S. nonprofit publishing free security guidance and operating large-scale awareness programs alongside government partners.
• Global Cyber Alliance: Nonprofit focused on reducing cyber risk through free toolkits and global awareness initiatives. Directly comparable as a nonprofit building free, deployable cybersecurity awareness resources for SMBs and consumers.
• Cybercrime Support Network: Nonprofit that educates consumers and small businesses about cybercrime and connects victims to resources. Directly comparable as a free-resource, awareness-focused nonprofit serving overlapping audiences with NCA.
• Internet Society: Global nonprofit advocating for an open, secure, and trustworthy Internet through education and policy work. Comparable as an internet-focused nonprofit producing public-facing education, policy content, and community programs at global scale.
• Identity Theft Resource Center (ITRC): Nonprofit providing consumer-facing identity-theft and cybercrime victim support, research, and education. Comparable as a U.S. nonprofit serving individual consumers on cyber/privacy issues with research-driven awareness content.

Regional players

• National Cybersecurity Alliance (UK): The UK's National Cyber Security Centre runs Cyber Aware, the closest international equivalent to NCA's Cybersecurity Awareness Month and Stay Safe Online portal. Comparable as a government-affiliated awareness body, but operating outside the U.S. and not directly competing for the same sponsors.

Broad incumbents

• (ISC)²: Global nonprofit professional association for cybersecurity practitioners offering certifications, training, and awareness programming. Comparable as a nonprofit community for cyber professionals and a producer of large-scale awareness content, but with a credentialing business model that NCA lacks.
• KnowBe4: Commercial security awareness and simulated phishing platform serving SMBs and enterprises globally. Comparable because it competes for the same enterprise security-awareness budget and addresses identical problems (phishing, MFA, password hygiene), but as a paid SaaS incumbent rather than a free nonprofit.
• ISACA: Global nonprofit association for IT governance, security, and audit professionals that publishes research, training, and awareness resources. Comparable as a nonprofit producing governance/security awareness content for practitioners and enterprises.
• SANS Institute: Largest commercial provider of cybersecurity training and awareness content, including the Securing The Human program aimed at end-user behavior change. Comparable as an awareness-training ecosystem player targeting overlapping enterprise and SMB audiences, though operating commercially rather than as a free nonprofit.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/StaySafeOnline
• Facebookfacebook.com/staysafeonline
• LinkedInlinkedin.com/company/national-cybersecurity-alliance

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about National Cybersecurity Alliance