Center for Internet Security Inc
Public records show a registered, tax-exempt organization in good standing.
What it says it does
THE MISSION OF THE CENTER FOR INTERNET SECURITY IS TO ENHANCE THE SECURITY READINESS AND RESPONSE OF PUBLIC AND PRIVATE SECTOR ENTITIES, WITH A COMMITMENT TO EXCELLENCE THROUGH COLLABORATION.
- Income
- $126.3 million
- Spending
- $143.1 million
- Spent on programs
- 63%
- Reserves
- 0.7 months of spending
- Largest source of income
- fees for its services, 83%
- Employees
- 542
- Volunteers
- 80
- Highest pay
- $1.2 million, president & ceo
Source: Form 990 for the year ending December 31, 2025, filed with the Internal Revenue Service. Rating method 2026.2. How we rate
Financial health
Weak: 28 out of 100. Higher than 0% of charities in its peer group (public benefit, over $100m).
Reserves
4 of 35Spendable reserves would cover 0.7 months of spending.
Debt
2 of 20It owes 87% of what it owns.
Living within its means
4 of 15Spending exceeded income by 13% of income.
Income trend
10 of 15Income fell 5% on the year before.
Spending floor
8 of 1563% of spending went to programs and raising each dollar of donations cost 0 cents.
Source: Form 990 for the year ending December 31, 2025, filed with the Internal Revenue Service. Rating method 2026.2. How we rate
Governance
Strong: 100 out of 100. Higher than 40% of charities in its peer group (public benefit, over $100m).
Independent board
25 of 259 of 12 voting board members are independent.
Conflict of interest policy
15 of 15Has a written conflict of interest policy.
Whistleblower policy
8 of 8Has a written whistleblower policy.
Record keeping policy
7 of 7Has a written policy on keeping and destroying records.
Board minutes
5 of 5Keeps minutes of board meetings.
Board sees the tax return
10 of 10Gave the board a copy of this return before filing it.
Pay set independently
5 of 5Sets its chief executive's pay through independent review and comparison.
Independent check of accounts
15 of 15Its accounts were audited by an independent accountant.
No reported misuse
10 of 10Reports no diversion of assets, excess benefits or loans to insiders.
Source: Form 990 for the year ending December 31, 2025, filed with the Internal Revenue Service. Rating method 2026.2. How we rate
Impact evidence
Describes programs. Its tax return describes what it does but we have found no measurable results in it.
Programs described in its return (7)
- $40.2 million spent. SECURITY BEST PRACTICES COMBINES BOTH THE SECURITY BENCHMARKS AND CRITICAL SECURITY CONTROLS PROGRAMS. THE SECURITY BENCHMARKS PROGRAM HELPS ORGANIZATIONS IMPROVE THEIR IT SECURITY POSTURE BY REDUCING RISKS RESULTING FROM INADEQUATE TECHNICAL SECURITY CONTROLS. TO ACCOMPLISH THIS, THE SECURITY BENCHMARKS PROGRAM FACILITATES THE CONSENSUS-BASED DEVELOPMENT OF: (1) BEST PRACTICE STANDARDS FOR SECURITY CONFIGURATION, (2) TOOLS FOR MEASURING INFORMATION SECURITY STATUS, AND (3) RESOURCES FOR MAKING INFORMED SECURITY INVESTMENT DECISIONS. THE CRITICAL SECURITY CONTROLS PROGRAM IS A RECOMMENDED SET OF ACTIONS FOR CYBER DEFENSE THAT PROVIDE SPECIFIC AND ACTIONABLE WAYS TO THWART THE MOST PERVASIVE ATTACKS. THEY ARE A RELATIVELY SHORT LIST OF HIGH-PRIORITY, HIGHLY EFFECTIVE DEFENSIVE ACTIONS THAT PROVIDE A "MUST DO, DO FIRST" STARTING POINT FOR EVERY ENTERPRISE SEEKING TO IMPROVE THEIR CYBER DEFENSE.
- $13.5 million spent. THE MS-ISAC PROGRAM PROVIDES A COMMON MECHANISM FOR RAISING THE LEVEL OF CYBERSECURITY READINESS AND RESPONSE IN EACH STATE AND WITH LOCAL GOVERNMENTS AND U.S. TRIBES AND TERRITORIES WITH THE GOAL OF IMPROVING THE OVERALL CYBERSECURITY POSTURE OF U.S. STATE, LOCAL, TRIBAL, AND TERRITORIAL (SLTT) GOVERNMENT ENTITIES. THE MS-ISAC PROGRAM COLLABORATES AND SHARES INFORMATION WITH ITS SLTT GOVERNMENT MEMBERS, PRIVATE SECTOR AND FEDERAL GOVERNMENT PARTNERS. THE MS-ISAC PROGRAM LEVERAGES TRUSTED RELATIONSHIPS WITH GOVERNMENT AND PRIVATE SECTOR ENTITIES TO GENERATE COORDINATED AND ACTIONABLE INTELLIGENCE PRODUCTS TO IMPROVE THE SECURITY POSTURE OF ALL PARTNERS. THE MS-ISAC ALSO PRODUCES EDUCATIONAL MATERIALS, MANAGES WORKGROUPS MADE UP OF SLTT MEMBERS, AND OPERATES IMPORTANT NATIONAL CYBER SECURITY PROGRAMS. THE DEPARTMENT OF HOMELAND SECURITY (DHS) DISCONTINUED FUNDING FOR THIS PROGRAM ON SEPTEMBER 29, 2025, AT WHICH TIME A FEE-BASED MEMBERSHIP MODEL WAS IMPLEMENTED, WHERE SLTT MEMBER ORGANIZATIONS PAY A YEARLY MEMBERSHIP FEE TO RECEIVE MS-ISAC BENEFITS AND SERVICES.
- $31.9 million spent. THE CIS SERVICES PROGRAM OFFERS SERVICES TO ALL STATE, LOCAL, TERRITORIAL, AND TRIBAL ENTITIES AND PUBLIC AUTHORITIES TO IMPROVE THEIR OVERALL CYBER AND ELECTION SECURITY. THESE SERVICES INCLUDE SCANNING, SECURITY ASSESSMENTS, PHISHING EXERCISES, AND OTHER CYBER SECURITY RELATED SERVICES.
- ALAN PALLER LAUREATE: THE ALAN PALLER LAUREATE PROGRAM IS INTENDED TO EMPOWER U.S.-BASED NONPROFIT ORGANIZATIONS, ACADEMIC INSTITUTIONS, AND INDIVIDUALS WHO ARE FOCUSED ON IMPROVING CYBERSECURITY BY: MAKING CYBERSECURITY CONTROLS DEMONSTRABLY MORE EFFECTIVE, SIMPLER, AND MORE AUTOMATED; DEVELOPING AND EQUIPPING HIGHLY SKILLED CYBER EXPERTS AND IMPROVING THE TEACHING OF CYBER DEFENSE AT EVERY LEVEL.
- $4.2 million spent. COUNTERING HYBRID THREATS: THE CIS PROGRAM FOR COUNTERING HYBRID THREATS IS A CIS-FUNDED AND OPERATED INITIATIVE, IN PARTNERSHIP WITH INDUSTRY, COMMUNITY-BASED ORGANIZATIONS, AND LAW ENFORCEMENT, WITH THE MISSION OF RESEARCHING AND BETTER UNDERSTANDING HOW TERRORIST ORGANIZATIONS, CRIMINAL ORGANIZATIONS, AND FOREIGN GOVERNMENTS FACILITATE, PLAN, INFORM OR INCITE VIOLENCE AND OTHER ILLEGAL ACTIVITY USING INTERNET-BASED COMMUNICATIONS TOOLS
- $509,695 spent. THE WORKFORCE DEVELOPMENT PROGRAM WAS BORNE OUT OF AN UNPRECEDENTED DEMAND FOR HIGHLY-SKILLED PRACTITIONERS CAPABLE OF BUILDING SECURITY INTO NEW AND EXISTING NETWORKS, ASSESSING SECURITY ON A REAL TIME BASIS AS NEW VULNERABILITIES ARE IDENTIFIED AND DISCLOSED, AND ACTING AS FRONT-LINE CYBER DEFENDERS ACROSS VARIOUS INDUSTRIES AND GOVERNMENT AGENCIES. THE CENTER SEEKS TO DEVELOP ASSESSMENT INSTRUMENTS TO RELIABLY PREDICT FUTURE PERFORMANCE AND APTITUDE FOR CYBERSECURITY JOBS, SUPPORTING BOTH THE GROWTH OF THE WORKFORCE AND ITS ABILITY TO DELIVER POSITIVE RESULTS.
- MISCELLANEOUS OTHER PROGRAMS
Source: Form 990 for the year ending December 31, 2025, filed with the Internal Revenue Service. Rating method 2026.2. How we rate
Legitimacy checks
Is it registered with the IRS? Passed.
Listed in the IRS master file of tax-exempt organizations as a 501(c)(3) charitable organization.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated September 7, 2026.
Has the IRS revoked its tax-exempt status? Passed.
Not on the IRS automatic revocation list.
Source: Automatic revocation of exemption list, Internal Revenue Service, file dated September 30, 2026.
Are donations tax-deductible? Passed.
On the IRS list of organizations eligible to receive tax-deductible contributions.
Source: Publication 78 data: organizations eligible for tax-deductible contributions, Internal Revenue Service, file dated September 10, 2026.
Is it keeping up with its IRS filings? Passed.
Most recent return on file covers the year ending December 2025.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated September 7, 2026.
How long has it been tax-exempt? Passed.
Recognized by the IRS since August 2012.
Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated September 7, 2026.
Is it in good standing with state regulators? Passed.
Not on California's list of charities barred from soliciting. Other states are not yet checked.
Source: May Not Operate or Solicit for Charitable Purposes list, California Attorney General, Registry of Charities and Fundraisers, file dated October 7, 2026.
Ratings and checks are our reading of public records, using the published method. They are not a statement about anyone's honesty. If you work for this organization, you can send corrections or results, confirm you want gifts through Veridonate, or ask to be removed from giving.