Project Galileo
Offers high-risk civic, journalism, and human rights organizations free Cloudflare security and performance services.
Eligibility · United States
Project Galileo is a Cloudflare initiative founded in 2014 that delivers free, enterprise-grade cybersecurity services to public-interest organizations that face targeted cyber attacks. The program is specifically designed for nonprofits, civil society groups, journalism outlets, human rights defenders, and humanitarian organizations whose websites represent vulnerable but important public infrastructure. As of 2025, Project Galileo protects more than 2,900 internet properties across 120 countries, collectively mitigating an average of 9.9 billion attacks per month.
Participants receive the full Cloudflare Business plan at no cost, which includes unmetered DDoS attack mitigation, Web Application Firewall (WAF), DNS, CNAME setup compatibility, SSL certificates, content delivery network (CDN) services, cache analytics, Cloudflare Workers, Zero Trust application access, Cloudflare Gateway, and image and mobile optimization. Organizations are admitted through two channels: referral from one of 57 trusted civil-society partner organizations — including the EFF, Amnesty International, Freedom House, CPJ, PEN America, and the Carter Center — or by direct application through Cloudflare's contact form. Direct applicants must describe the domain, their mission and nonprofit status, how they serve the public interest, and what factors make them a vulnerable target.
The program is exclusively in-kind — no cash or monetary disbursement is involved. For-profit companies and organizations outside the human rights, journalism, democracy, and civil society sectors are not eligible. Applications are accepted on a rolling basis with no competitive funding cycle, and admission is approved by Cloudflare in consultation with its partner network. Organizations with an existing relationship with one of the 57 partners have the smoothest path to admission.
Free Cloudflare Business-plan cybersecurity services — including DDoS mitigation, WAF, and CDN — for nonprofits and civil-society organizations in human rights, journalism, and democracy.
Sign up free to see the funding breakdown
Sign up free to see the full eligibility
Sign up free to see how to apply
Sign up free to see what you submit