This is a dictionary of companies or verified experts offering cybersecurity services, data, or other tangible assets to assist in Ukraine's defense of its independence. Secondarily, this may also have resources for other entities in responding to the increasing threat of Russia beyond its own borders.
Source of information: https://twitter.com/Andrew___Morris/status/1496923545712091139
Services being offered: Threat Intelligence
Who is eligible: All people can access GreyNoise's list of IPs performing recon against Ukrainian IPs. Ukrainians & NATO members can access additional services through GreyNoise.
How are the services accessed: Ukrainians & NATO members can access enhanced services by signing up for GreyNoise where they will be automatically upgraded on signup, and existing accounts have been upgraded.
Source of information: Kontinuum reached out to r/cybersecurity via Reddit and GitHub
Services being offered: Free Security assessments and free remediation if in our skill set, 30 days free NGAV with SOC monitoring/threat Intel for workstations, servers, mobile devices, real time IP address scanning an blocking of traffic on firewalls. The 30 days can be extended as needed per conditions in Ukraine and heightened alert levels.
Who is eligible: freelance journalists, Ukranians, anyone helping the Ukrainian effort or any company stateside.
How are the services accessed: please send an email to info@kontinuum.com and we will get in touch with you to help where and how we can.
Source of information: https://twitter.com/_IntelligenceX/status/1497671064054288384
Services being offered: Full access to OSINT platform
Who is eligible: Ukrainian government
How are the services obtained: Sign up with an email address ending in gov.ua and you will be automatically upgraded
Source of information: https://twitter.com/FlokiNETehf/status/1496968251615686657
Services being offered: web infrastructure, DDoS protection.
Who is eligible: Ukrainian journalists & news agencies.
How are the services accessed: Email info@flokinet.is
Source of information: https://www.linkedin.com/feed/update/urn:li:activity:6903059206522712064/
Services being offered: Free 6 months DNS Firewall service subscription
Who is eligible: Ukraine-based companies and government entities
How are the services accessed: Complete the DNS Firewall evaluation form and put "Ukraine based" in the comments. Then, follow the instructions to set up an evaluation call with Malware Patrol to discuss the set-up for your security environment. https://www.malwarepatrol.net/dns-firewall-evaluation-request/?source=ukraine
Source of information: https://www.linkedin.com/posts/michaelthiessmeier_ukraine-cybersecurity-alliedcyberpartners-activity-6899690456368709632-DDI2
Services being offered: Personal Security & Cybersecurity consulting (individuals and organizations )
Who is eligible: Ukrainians and Ukrainian Organizations
How are the services accessed: Contact directly on LinkedIn or by emailing ukraine@alliedcyberpartners.com
Source of information: https://twitter.com/sa0un/status/1497299556022857730
Services being offered: DDoS mitigation, secure web hosting
Who is eligible: people/organizations in Ukraine
How are the services accessed: DM @sa0un
Source of information: https://www.linkedin.com/feed/update/urn:li:activity:6902750306459820032/
Services being offered: Threat Intelligence
Who is eligible: Any organization in the Ukraine.
How are the services accessed: Email ukraine@prevailion.zendesk.com for free access to Prevailion's APEX platform.
Source of information: https://twitter.com/GelosSnake/status/1497683065799262211
Services being offered: Incident Response, defensive activities
Who is eligible: Unclear
How are the services accessed: Contact @GelosSnake (?)
Source of information: https://twitter.com/tcpdirect/status/1497017919917678593
Services being offered: Hosting and VPNs
Who is eligible: Unclear
How are the services accessed: DM @tcpdirect, or email support@akamai.services, or use #tcpdirect on ircdchat
Source of information: https://twitter.com/cahlberg/status/1496874932273389569
Services being offered: Threat Intelligence
Who is eligible: Unknown (Ukraine?)
How are the services accessed: Unknown
Source of information: https://twitter.com/runasand/status/1496847746233520128
Services being offered: individual physical/digital safety consultations, VPN accounts
Who is eligible: Journalists in Ukraine
How are the services accessed: Runa provided her email address in this tweet.
Source of information: https://twitter.com/sa0un/status/1496962004497711109
Services being offered: VPN accounts
Who is eligible: Journalists in Ukraine
How are the services accessed: Contact sa0un on Twitter
Source of information: https://twitter.com/RobertMLee/status/1496862093588455429
Services being offered: Dragos Platform, managed ICS cybersecurity services, Incident Response.
Who is eligible: Small co-op/municipal utilities in US, UK, Australia, New Zealand
How are the services accessed: Contact staff (https://www.linkedin.com/in/robmichaellee)
This list is split into offers of assistance for individuals (right now, all known offers are focused on keeping journalists safe/secure), offers of assistance to Ukraine+EU organizations, and offers of assistance to non-Ukraine/non-EU organizations.
To make this most effective, this repository will only take entities which are making tangible commitments to Ukraine or other countries in need. No thoughts & prayers are allowed on this list. Further, entities that provide easy to access services will be placed near the top of their section, and those making a specific commitment to provide services to Ukraine but not detailing how Ukrainians could access those services will be placed near the bottom of their section.
To add a resource you've found - either a company or verified expert offering resources to Ukraine, create a new Issue and use the provided template to provide the requested information (such as the source of the information, the company name, what services are being provided, etc.). Moderators will validate, add your finding to the list, and close the issue manually. You will need a GitHub account for this.