Cybersecurity for nonprofits isn’t about racing through a checklist—it’s about transformation that lasts. Too often, well-meaning funders celebrate how many organizations they’ve “reached” instead of asking whether those organizations are actually safer. Numbers might look good on a report, but they rarely capture what happens when a nonprofit has to balance protecting its community with keeping the doors open.

At Sightline, we’ve seen firsthand that real change happens in the conversations that don’t make the headlines—the ones where leaders wrestle with trade-offs between security and accessibility, or where trust in their community is just as critical as patching a system. A generic checklist can’t capture those choices. But listening, adapting, and walking alongside nonprofits can.

That’s why we’re challenging funders and sponsors to shift the lens: measure impact not by dashboards and checkmarks, but by the stories of resilience, innovation, and trust that nonprofits carry forward. Because when cybersecurity supports the mission instead of standing in its way, that’s when transformation truly takes root.

As RSA2025 kicks off with the theme "Many Voices, One Community," it’s a powerful reminder: community doesn’t just happen — it’s built, choice by choice, action by action.

At Sightline Security, we’re making sure the nonprofit sector — organizations fighting every day for causes that impact us all — are not left out of the cybersecurity conversation. But we cannot do it alone. In these uncertain times, the security community’s leadership is needed more than ever.

At Sightline Security, we are proud to have been part of this coalition from the beginning. As we reflect on three years of progress, we also look ahead to the work that remains. Cyber threats against nonprofits are not slowing down—if anything, they are growing in complexity. That’s why Sightline remains focused on providing what we do best: the first critical step in nonprofit cybersecurity.