Center for Internet Security

Center for Internet Security

Promotes cybersecurity best practices and benchmarks

Overview

The Center for Internet Security (CIS) is a nonprofit organization that helps make the online world safer. It does this by creating widely used security guides, including CIS Controls (a set of prioritized actions to improve cybersecurity) and CIS Benchmarks (step-by-step configuration standards for IT systems). These standards are developed through a global, community-driven process and are used by private businesses, public organizations, and government entities. CIS also offers services and partnerships, a membership model, and a collaborative platform called CIS WorkBench where cybersecurity professionals network and share best practices. Unlike many for-profit vendors, CIS focuses on open, consensus-based standards and community collaboration rather than selling proprietary software alone. Its goal is to build confidence in the connected world by reducing cyber threats and helping organizations implement effective security measures.

About Center for Internet Security

Simplify's Rating
Why Center for Internet Security is rated
C
Rated B on Competitive Edge
Rated C on Growth Potential
Rated D+ on Differentiation

Industries

Enterprise Software

Cybersecurity

Company Size

501-1,000

Company Stage

Early VC

Total Funding

$1.7M

Headquarters

New York

Founded

2000

Get referred to Center for Internet Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • April 20, 2026 AI companion guides extend CIS Controls into LLMs and MCP.
  • August 12, 2026 CIS still issued SonicWall GMS advisories, proving operational relevance.
  • AWS Marketplace distribution and partnerships with Astrix and Cequence widen CIS enterprise reach.

What critics are saying

  • CISA funding ended September 30, 2025, forcing MS-ISAC onto paid memberships.
  • Cybersecurity Dive reported June 2026 membership losses of roughly 70 percent after funding cuts.
  • If fee conversions stall, CIS loses its core public-sector network and threat-intelligence engine.

What makes Center for Internet Security unique

  • CIS Controls and Benchmarks remain default hardening standards across enterprises and governments.
  • CIS combines nonprofit neutrality with a large practitioner community through WorkBench and MS-ISAC.
  • CIS released AI and HPC hardened images on AWS Marketplace in April 2026.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$1.6M

Above

Industry Average

Funded Over

1 Rounds

Early VC funding comparison data is currently unavailable. We're working to provide this information soon!
Early VC Funding Comparison
Coming Soon

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Unlimited Paid Time Off

Flexible Work Hours

Remote Work Options

Paid Vacation

Paid Holidays

401(k) Retirement Plan

401(k) Company Match

Stock Options

Company Equity

Wellness Program

Mental Health Support

Conference Attendance Budget

Family Planning Benefits

Fertility Treatment Support

Professional Development Budget

Phone/Internet Stipend

Home Office Stipend

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

-1%

2 year growth

2%
Center for Internet Security
Jul 28th, 2026
CIS named among Top Workplaces of the Capital Region.

CIS named among Top Workplaces of the Capital Region. July 28, 2026. The Center for Internet Security has once again been named one of the Capital Region's Top Workplaces by the Albany Times Union. CIS received a special award for Work/Life Flexibility, with one employee reporting "I have the flexibility I need to balance my work and personal life."

Washoe County
May 12th, 2026
Top headlines from the Board of County Commissioners meeting.

Top headlines from the Board of County Commissioners meeting. The following are highlights from today's Washoe County Board of County Commissioners meeting: 1. Registrar of Voters presents "Project Plain Sight": Washoe County has launched an election security pilot project with the Center for Internet Security (CIS), a national nonprofit organization dedicated to data integrity. Registrar of Voters Andrew McDonald presented "Project Plain Sight," a public-facing data transparency tool providing the public an opportunity to independently verify the integrity of the voter registration system. "Mr. McDonald and his team are laying the groundwork for greater confidence in the future of Washoe County elections, but I truly believe that when this pilot has been proven, and when it's been extended beyond just this pilot phase and applied to the entire election system, this project will echo all over Nevada and across the entire nation," Chair Clara Andriola said. "I believe we've started something here that will have a huge impact." CIS was launched by a former National Security Administration (NSA) data expert to implement best practices in data integrity across numerous industries. CIS worked with Washoe County to build a pilot project specifically to validate voter registration data, not ballots, through a system of controls that can be viewed by the public. "I truly believe that Washoe County is about to change the course of history. Election security challenges have never been solved because every attempt to solve them has failed because they lack something critical: proof of performance for election systems as a whole and a focus on process and people and not products," Andriola said. "Mr. McDonald's project is putting our eye on process-oriented monitoring and reporting." The cost of the project is staff time only, and the dashboard will be available on the Washoe County website here. "We push the boundaries now in Washoe County and in the Registrar of Voters Office. Innovation is part of our mission statement. When I came here, I wanted to push the boundaries of making sure that we can give the public what they needed: the confidence in the election process - integrity," McDonald said. "With this tool, they can go out and do the work themselves to verify it." 2. Board approves contract for operation of Safe Camp and Resource Center: The Board approved a contract to run Safe Camp and the Resource Center at the Nevada Cares Campus to the Reno Initiative for Shelter and Equality (RISE). RISE will provide staffing, program management, and administrative oversight for a two-year term through June 30, 2028, with an option of three one-year extensions. RISE was selected as the most responsive and responsible respondent to a Request for Proposals, and the contract will include the final two weeks of June 2026 at a cost of $38,750, and annual compensation of just over $2 million for each year of the contract beginning July 1. 3. Board acknowledges Code Enforcement complaints on abandoned properties: Washoe County staff, at the direction of the Board of County Commissioners, have been tackling the issue of abandoned privately owned parcels - largely concentrated in Sun Valley - that have no discernible owner responsible for cleanup efforts. Code Enforcement brought forward complaints against 11 such parcels for the Board's acknowledgement and to set a date for a public hearing to designate those parcels as public nuisances. Code Enforcement has documented conditions on these parcels including, but not limited to, the accumulation of debris, rubbish, refuse, abandoned or junk vehicles, and property maintained in a state of disrepair or deterioration that could cause harm to persons or damage to property. "These are very complex issues with owners who are deceased," Commissioner Mariluz Garcia said. "I think the assumption is that the County doesn't care or that we're turning our back, but that's not the case because if you look at any of these parcels, they've had multiple complaints, multiple warnings issued. In many cases, a lot of intervention has taken place already with removing vehicles and cleanups, but you just can't tell. Often, these are so bad that those efforts go unnoticed, so I just wanted to publicly acknowledge all the hard work that goes into addressing these, and we're off to a great start." 4. Board adopts zoning change to allow residential in commercial zones: The Board voted unanimously to approve a new code that will allow multifamily residential use in commercial zones and will prescribe requirements and standards for these uses. The addition of Article 403 complies with a new law passed during the 2025 Legislative Session (AB241) that mandates that Washoe County permit the development of multi-family uses in commercial zoning districts. The new code also accommodates Washoe County's strategic priority to increase the supply and affordability of housing. 5. Board approves donations to county departments and programs: The Board approved the following donations: * $18,500 from the Community Foundation of Northern Nevada on behalf of the Paul and Gwen Leonard Charitable Foundation as a legacy bequest for support of Rancho San Rafael Regional Park. * Cash donations from numerous donors totaling just over $25,500; animal food and treats valued at approximately $22,500 from SPCA; and various food and goods valued at approximately $6,800 from various donors to Washoe County Regional Animal Services. 6. Board presents proclamations recognizing special causes: Commissioners read three proclamations recognizing special groups and causes in Washoe County. * May 10-16 was designated Police Week to honor the dedication and sacrifices of law enforcement professionals. * May was proclaimed Treatment Court Month, and Judge Kendra Bertschy was present to receive the proclamation and recognize the more than 1,500 individuals served by treatment courts in Washoe County each year. * May was also proclaimed Educator Appreciation Month to honor the educators in our schools and educational institutions.

Associated Press
Apr 15th, 2026
CIS launches hardened cloud images for AI and HPC workloads in AWS Marketplace

The Center for Internet Security has launched CIS Hardened Images for AI, expanding its secure cloud offerings to support artificial intelligence and high-performance computing workloads. The images are now available in AWS Marketplace. The new offering includes two hardened images based on Amazon Linux 2023 and Ubuntu 24.04, aligned with CIS Benchmarks security standards. One supports GPU-based AI workloads including machine learning and model training, whilst the other targets high-performance computing and distributed processing. The pre-configured images aim to help organisations deploy AI infrastructure with security built in from the start, reducing manual configuration complexity. They're designed to serve both commercial enterprises and public sector organisations, supporting compliance with frameworks including NIST guidance. CIS is a community-driven nonprofit organisation responsible for globally recognised cybersecurity best practices.

FM Contract Watch
Feb 6th, 2026
Congratulations to CIS Security Teams on receiving 2025 Silver Fox Awards

Congratulations to CIS Security Teams on receiving 2025 Silver Fox Awards. On 5th February, Lynda Moore, Managing Partner of FM Contract Watch, visited the head office of CIS Security and presented five 2025 Silver Fox Awards. During 2025, the Silver Fox Audit team carried out about 200 audits throughout the CIS client base and the security teams at 55 Ludgate Hill, The White Collar Factory, Almack House, 6 St James Square and One Crown Place received an award due to preventing unauthorised access to their site and excelling in the overall score which includes Officer knowledge and site documentation. Congratulations to all the Security Teams on their excellent work.

Intent Amplify
Dec 10th, 2025
CIS, Astrix & Cequence Announce Partnership to Secure AI Systems

CIS, Astrix & Cequence announce partnership to secure AI systems. The Center for Internet Security, Inc. (CIS(R) has joined forces with Astrix Security and Cequence Security to launch a new strategic partnership aimed at developing cybersecurity guidance specifically designed for environments powered by artificial intelligence (AI) and agentic systems. As AI rapidly evolves and introduces new risks related to autonomous decision-making, API access, and automated threats, this collaboration seeks to fill an urgent security gap with actionable and structured best practices. This initiative builds on the widely adopted CIS Critical Security Controls(R), extending their long-standing security principles into the emerging domain of AI-driven ecosystems. The partnership's first major output will be two companion guides. One will serve AI Agent Environments, offering instructions on securing the entire lifecycle of agentic systems. The other will focus on Model Context Protocol (MCP) environments, which are becoming increasingly important as AI systems integrate with tools, plugins, and external data sources. MCP environments, in particular, create unique challenges for cybersecurity teams. They often involve uncontrolled data flows, credential exposure, unsecured local execution, and unapproved third-party interactions. When MCP agents, registries, and tools dynamically connect to enterprise applications, the attack surface expands dramatically. The planned guidance will help organizations establish targeted, practical safeguards tailored to this new reality. Curtis Dukes, Executive Vice President and General Manager of Security Best Practices at CIS, highlighted the urgency of the effort, stating, "AI presents both tremendous opportunities and significant risks. By partnering with Astrix and Cequence, we are ensuring that organizations have the tools they need to adopt AI responsibly and securely." Astrix's expertise will be instrumental in protecting AI agents, MCP servers, and the Non-Human Identities (NHIs) that enable them. These NHIs - including service accounts, OAuth tokens, and API keys - play critical roles in connecting AI systems to essential business applications but can be exploited if not properly governed. Jonathan Sander, Field CTO at Astrix Security, emphasized the duality of potential and risk, explaining, "AI agents and the non-human identities that power them bring great potential but also new risks... Through this partnership, we're providing clear, practical guidance to keep AI ecosystems safe so organizations can innovate with confidence." Cequence Security will contribute its long-standing experience in API and application security, focusing on strengthening governance and visibility across agentic environments. Ameya Talwalkar, CEO of Cequence Security, underscored the importance of transparency and control, saying, "As organizations embrace agentic AI, trust hinges on visibility, governance, and control over what those agents can see and do to your applications and data." * Extend proven security frameworks into AI environments. * Provide clear, prioritized, and actionable safeguards for secure AI adoption. * Unite expertise from standards development, API defense, and application security to build stronger protections. The new guidelines - expected to release in early 2026 - will be accompanied by workshops, webinars, and additional educational resources. These efforts will help organizations implement recommendations effectively and build a shared understanding of how to secure AI systems. By establishing a common language and framework, the partnership hopes to enhance resilience, trust, and security across the rapidly growing AI ecosystem.

Recently Posted Jobs

Sign up to get curated job recommendations

Center for Internet Security is Hiring for 3 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify. Browse all jobs →