Resource Library
Curated collection of free Canadian cybersecurity resources, tools, and government guidance for SMBs.
Canadian resources listed first. Every link below opens in a new tab and goes to the official source.
Cyber Emergency? Call Now
Canadian Anti-Fraud Centre (CAFC)
For fraud, BEC, ransomware. antifraudcentre-centreantifraude.ca
Canadian Centre for Cyber Security
Report cyber incidents, get threat alerts. cyber.gc.ca
Canadian Authorities & Regulators
The official Canadian organizations. Bookmark the ones relevant to your business.
Canadian Centre for Cyber Security (Cyber Centre)
Federalhttps://www.cyber.gc.ca/en/incident-management
Federal lead for cybersecurity. Report incidents, get alerts, access baseline controls and threat briefings.
Canadian Anti-Fraud Centre (CAFC)
Federalhttps://www.antifraudcentre-centreantifraude.ca
Central agency for reporting fraud and cybercrime in Canada. Tracks fraud losses nationally.
Get Cyber Safe (Public Safety Canada)
Federalhttps://www.getcybersafe.ca
Public awareness campaign with free guides, tip sheets, and resources for Canadian SMBs and individuals.
Office of the Privacy Commissioner of Canada (OPC)
Federalhttps://www.priv.gc.ca/en/privacy-topics/business-privacy/breaches-and-safeguards/privacy-breaches-at-your-business/
Federal privacy regulator. PIPEDA breach reporting, guidance for businesses handling personal information.
CyberSecure Canada Certification (Standards Council of Canada)
Federalhttps://scc-ccn.ca/accreditation/accreditation-programs/management-systems/cybersecure-canada
Federal cybersecurity certification program for Canadian SMBs. Now administered by the Standards Council of Canada. Free eLearning via the Cyber Centre.
Canadian Cyber Threat Exchange (CCTX)
All Canadahttps://cctx.ca
Canada's private-sector cyber threat sharing organization. Free membership for Canadian businesses.
RCMP — Cybercrime
Federalhttps://www.rcmp-grc.gc.ca/en/crime-prevention/cyber-crime
Report cybercrimes to the Royal Canadian Mounted Police. Local detachments also accept reports.
Innovation, Science and Economic Development Canada (ISED)
Federalhttps://www.ic.gc.ca/eic/site/icgc.nsf/eng/home
CyberSecure Canada program lead. Also provides digital adoption resources for SMBs.
Commission d'accès à l'information du Québec (CAI)
Quebechttps://www.cai.gouv.qc.ca
Quebec's privacy regulator. Required breach reporting under Quebec Law 25.
Office of the Information and Privacy Commissioner of Alberta (OIPC AB)
Albertahttps://www.oipc.ab.ca
Alberta's privacy regulator. PIPA breach reporting.
Office of the Information and Privacy Commissioner for British Columbia (OIPC BC)
BChttps://www.oipc.bc.ca
BC's privacy regulator. PIPA breach reporting.
Information and Privacy Commissioner of Ontario (IPC)
Ontariohttps://www.ipc.on.ca
Ontario's privacy and access regulator. PHIPA breach reporting for health information custodians.
Financial Services Regulatory Authority of Ontario (FSRA)
Ontariohttps://www.fsrao.ca
Insurance regulator in Ontario. Verify insurance broker licensing and file insurance complaints.
Autorité des marchés financiers (AMF) — Quebec
Quebechttps://lautorite.qc.ca
Quebec's financial markets and insurance regulator. Verify insurance representatives and file complaints.
British Columbia Financial Services Authority (BCFSA)
BChttps://www.bcfsa.ca
BC's financial services regulator, including insurance. Verify insurance licensing and file complaints.
Insurance Bureau of Canada (IBC)
All Canadahttps://www.ibc.ca
National insurance industry association. Consumer guidance on cyber insurance products.
Business Development Bank of Canada (BDC)
All Canadahttps://www.bdc.ca/en/articles-tools/technology
Provides advisory services, articles, and templates on technology and cybersecurity for Canadian SMBs.
Canadian Federation of Independent Business (CFIB)
All Canadahttps://www.cfib-fcei.ca
Member resources on cyber risk, insurance, and breach response for Canadian small businesses.
Canadian Vendors & Partners
Canadian or Canada-strong vendors for EDR, MDR, MSSP, IR, and security services. Use the Product Selector to see which fit your business.
Field Effect Software
HQ CanadaMDR / EDR
Ottawa-based. Covalence MDR platform purpose-built for SMBs. Combines EDR, network monitoring, and vulnerability management.
https://www.fieldeffect.com
eSentire
HQ CanadaMDR / SOC
Waterloo, Ontario-based. One of the largest pure-play MDR providers globally. 24/7 SOC with threat hunting.
https://www.esentire.com
ISA Cybersecurity
HQ CanadaMSSP / IR
Toronto-based. Managed security services and incident response. Canadian data residency.
https://www.isacybersecurity.ca
Bulletproof Solutions
HQ CanadaMSSP / Compliance
Canadian MSSP with offices in Atlantic Canada and Ontario. PCI, SOC 2, ISO 27001 compliance services.
https://www.bulletproofsi.com
Scalar Security (Scalar Decisions)
HQ CanadaMSSP / Consulting
Toronto-based IT security consultancy. Risk assessments, penetration testing, and managed security.
https://www.scalar.com
Cytelligence
HQ CanadaIncident Response
Canadian incident response firm. 24/7 breach response, digital forensics, and ransomware negotiation support.
https://www.cytelligence.com
TELUS Security
HQ CanadaTelco Security
TELUS Online Security, Managed Security Services. Strong Western Canada presence with national reach.
https://www.telus.com/en/business/security
Bell Business Security
HQ CanadaTelco Security
Bell MSS and managed detection. Strong Eastern Canada presence with national reach.
https://business.bell.ca/shop/medium-large/cybersecurity
Rogers for Business — Cybersecurity
HQ CanadaTelco Security
Rogers cybersecurity services for SMB and enterprise. National coverage.
https://www.rogers.com/business/enterprise/iot-security
N-able (formerly SolarWinds MSP)
HQ CanadaRMM / Backup
Canadian-headquartered RMM and backup platform. Used by thousands of Canadian MSPs.
https://www.n-able.com
Herjavec Group
HQ CanadaMSSP / Consulting
Toronto-based cybersecurity services and managed security. Acquired by EY in 2023.
https://www.herjavecgroup.com
Microsoft Canada
Strong Canadian PresenceSuite / Cloud
M365 Business Premium, Defender for Endpoint, Entra ID. Datacenters in Canada (Toronto, Quebec City).
https://www.microsoft.com/en-ca
Bitwarden
Global with Canadian OfficePassword Management
Password manager with data hosting in Canada for Canadian users. Open source.
https://bitwarden.com
Cloudflare
Global with Canadian OfficeNetwork / DNS
Global network with Canadian Points of Presence. 1.1.1.1 DNS, Gateway, Zero Trust.
https://www.cloudflare.com
CrowdStrike
Global with Canadian OfficeEDR / XDR
Global leader in EDR. Canadian data residency available. Used by many Canadian enterprises.
https://www.crowdstrike.com
SentinelOne
Global with Canadian OfficeEDR / XDR
Singularity platform. AI-driven autonomous response. Canadian customers across all industries.
https://www.sentinelone.com
Sophos
Strong Canadian PresenceEDR / Firewall
UK-based with strong Canadian presence. Intercept X EDR, XG/XGS firewall. MSP-friendly.
https://www.sophos.com/en-ca
Huntress
Strong Canadian PresenceMDR
Purpose-built MDR for SMBs and the MSPs that serve them. Strong adoption among Canadian MSPs.
https://www.huntress.com
Free Tools, Frameworks & Training
Self-serve resources, organized by category.
Government
Canadian Centre for Cyber Security (Cyber Centre)
Federal lead for Canadian cybersecurity. Free alerts, threat briefings, baseline controls, and SMB guides.
https://www.cyber.gc.ca
GovernmentGet Cyber Safe (Public Safety Canada)
Public awareness campaign with free guides, tip sheets, and downloadable posters for Canadian SMBs.
https://www.getcybersafe.ca
GovernmentCyberSecure Canada Certification (SCC)
Federal cybersecurity certification program for Canadian SMBs. Now administered by the Standards Council of Canada.
https://scc-ccn.ca/accreditation/accreditation-programs/management-systems/cybersecure-canada
GovernmentCanadian Anti-Fraud Centre (CAFC)
Report fraud and cybercrime in Canada. Call 1-888-495-8501 or file online. Tracks fraud losses nationally.
https://www.antifraudcentre-centreantifraude.ca
GovernmentOffice of the Privacy Commissioner of Canada (OPC)
Federal privacy regulator. PIPEDA breach reporting, guidance for businesses handling personal information.
https://www.priv.gc.ca
GovernmentInnovation Canada
Digital adoption and cybersecurity resources for Canadian SMBs.
https://www.ic.gc.ca/eic/site/icgc.nsf/eng/home
GovernmentRCMP — Cybercrime
Report cybercrimes to the RCMP. Local detachments also handle cybercrime reports.
https://www.rcmp-grc.gc.ca/en/crime-prevention/cyber-crime
Industry
Canadian Cyber Threat Exchange (CCTX)
Canada's private-sector cyber threat sharing organization. Free membership for Canadian businesses.
https://cctx.ca
IndustryInsurance Bureau of Canada (IBC)
National insurance industry association. Information on cyber insurance products and consumer guidance.
https://www.ibc.ca
Business
Business Development Bank of Canada (BDC) — Technology
BDC articles, templates, and advisory services for Canadian SMB technology and cybersecurity.
https://www.bdc.ca/en/articles-tools/technology
BusinessCanadian Federation of Independent Business (CFIB)
Member resources on cyber risk, insurance, and breach response for Canadian small businesses.
https://www.cfib-fcei.ca
BusinessDigital Main Street (Ontario)
Free digital adoption program for Ontario main street businesses, includes cybersecurity modules.
https://digitalmainstreet.ca
Framework
CIS Controls v8 (Free Download)
Prioritized set of security controls. IG1 (Implementation Group 1) is for resource-limited SMBs.
https://www.cisecurity.org/controls
FrameworkNIST Cybersecurity Framework 2.0
Free framework for building security programs. Widely adopted globally including in Canada.
https://www.nist.gov/cyberframework
Tool
Have I Been Pwned
Free breach notification service. Check if business email addresses have been exposed.
https://haveibeenpwned.com
ToolBitwarden (Free Password Manager)
Open-source password manager with a generous free tier. Hosted in Canada for Canadian users.
https://bitwarden.com
ToolCloudflare 1.1.1.1 (Free DNS)
Free DNS resolver with built-in malware and phishing protection.
https://1.1.1.1
ToolAOMEI Backupper Free
Free Windows backup to external drive, NAS, or network share.
https://www.aomeitech.com/aomei-backupper.html
ToolVeeam Community Edition
Free backup for up to 10 VMs. Industry standard for virtualized environments.
https://www.veeam.com/virtual-machine-backup-solution-free.html