Whitehat Community Defense Program

Free OT/ICS security help for the
communities that protect us

Water districts, electric co-ops, clinics, ports, and other critical-infrastructure operators keep our communities running — often with little or no security support. CyberICS Solutions gives a limited number of under-resourced organizations a free, no-obligation exposure review each quarter. No sales pitch. Just help.

Apply for Your Free Review →
✓ Completely free ✓ Passive & non-intrusive ✓ No obligation, ever ✓ OT/ICS specialists
What approved organizations receive

A picture of your public exposure — and recommended best practices

🔎

Exposure Brief

A plain-language report of what's visible about your organization on the public internet — exposed systems, known vulnerabilities, and breached credentials — built entirely from public data.

🎯

OT Tabletop Exercise

For organizations accepted into the pro-bono cohort: one facilitated, sector-matched tabletop exercise so your team can practice responding before a real incident.

✅

Prioritized Recommendations

The key risks we observe, prioritized, with recommended best practices and links to free and low-cost resources — so you can act with your own team or any provider you choose.

Our promise to you

  • This is a free community service — there is never a cost or a purchase requirement.
  • Our review is passive and non-intrusive: we use only publicly available data.
  • We treat everything we find as confidential and never publish or share it without your written consent.
  • We do not scan, probe, access, or log into your systems as part of this review.
  • We do not attach a sales pitch to the help we give you.
Apply to the program

Request your free exposure review

We review every application and onboard a limited number of organizations each quarter. Tell us about your organization below — it takes about three minutes.

Your organization
Used to identify your public exposure and to verify ownership.
Your security posture
Your contact details
Please use an email on your organization's domain — it helps us verify you're authorized to apply.
Program Terms & Privacy Notice

1. Nature of the program

The Whitehat Community Defense Program is a complimentary community service offered by CyberICS Solutions ("CyberICS"). Submitting an application does not create a contract, engagement, or professional-services relationship, and does not obligate CyberICS to provide any service. Any pro-bono engagement begins only upon a separately executed written authorization and statement of work.

2. Authorization for passive assessment

By submitting, you authorize CyberICS to perform a passive, non-intrusive exposure review of your organization using only publicly available, third-party data sources. CyberICS will not scan, probe, access, or log into your organization's systems, and will not use any credentials, as part of this complimentary review. Any active testing or system access requires separate, signed authorization.

3. Authority

You represent and warrant that you are authorized to submit this application on behalf of the organization identified and to grant the authorization described in Section 2.

4. No warranty; advisory only

Any findings or recommendations are provided on a best-effort, "as-is" basis for informational purposes only. They are based on publicly available data that may be incomplete or out of date, do not guarantee that all vulnerabilities have been identified, and are not a substitute for a comprehensive security assessment. To the fullest extent permitted by law, CyberICS disclaims all warranties and is not liable for any action taken based on the information provided.

5. Confidentiality & publication

CyberICS treats your application data and any findings as confidential and will not publish them or share them with third parties without your written consent, except as required by law or to responsibly route a finding to a hosting provider, internet service provider, or national cybersecurity authority (CERT/CSIRT) where appropriate.

6. Privacy

CyberICS collects the information you provide to evaluate eligibility, verify domain ownership, contact you, and deliver the service. We do not sell personal information. Data is stored securely and retained only as long as needed for the program, after which it is deleted or anonymized. Depending on your location, you may have rights to access, correct, or delete your personal data — contact privacy@cybericsolutions.com. International applicants: your information may be processed in the United States and other jurisdictions. See our Privacy Policy.

7. Lawful use

This program is intended for legitimate organizations seeking to protect their own infrastructure. You may not use it to request assessment of systems you are not authorized to represent.

Free · No obligation · We review every application and onboard a limited number of organizations each quarter.

🛡️

Application received

Thank you for applying to the Whitehat Community Defense Program. We've sent a confirmation to your email.

We review every application and onboard a limited number of organizations each quarter. A member of our team will reach out about verifying your domain and next steps. There's nothing more you need to do right now.

Questions? communityprogram@cybericsolutions.com