What cybersecurity services does CIRA offer?

Updated

CIRA offers cybersecurity services through two main tracks: managed detection and response products (XDR, MDR, DNS Firewall), plus awareness training and DNS infrastructure services like Anycast DNS and CIRA Canadian Shield. These are aimed at organizations — enterprises, SMBs, and public-sector bodies such as schools, healthcare providers, and municipalities — rather than individual consumers. If you are evaluating whether CIRA fits your organization, the practical next step is a scoping conversation: CIRA's site provides a "Book a meeting" option to get guidance.

The product lineup

CIRA groups its cybersecurity offerings under a few headings:

  • XDR (Extended Detection and Response) — threat detection and response across your environment.
  • MDR (Managed Detection and Response) — a managed service layer for detection and response.
  • DNS Firewall — filtering and blocking at the DNS layer.
  • Cybersecurity Awareness Training — staff-facing training to reduce human-risk exposure.
  • Anycast DNS — DNS resolution infrastructure, listed under both cybersecurity and registry services.
  • TLD Anycast — anycast DNS for top-level domains, aimed at registry operators.
  • CIRA Canadian Shield — a protective DNS service, now available across Windows, macOS, iOS, and Android devices.

CIRA also frames these as a "CIRA Cyber Stack," which suggests the products are intended to be combined rather than bought as isolated point tools.

Who each service is for

The right entry point depends on what you are trying to solve:

If your need is… Look at…
Detect and respond to threats across endpoints/network XDR or MDR
Block malicious or unwanted domains before connection DNS Firewall, CIRA Canadian Shield
Reduce phishing and social-engineering risk from staff Cybersecurity Awareness Training
Fast, resilient DNS resolution for your own services Anycast DNS
DNS infrastructure as a registry or TLD operator TLD Anycast

Solutions by industry and organization size

CIRA organizes its cybersecurity offerings by sector as well as by product:

  • Education
  • Healthcare
  • Municipalities
  • Hosting providers, registrars, MSPs, and resellers
  • Enterprise and SMB

This matters because the compliance, procurement, and threat profile differ sharply between, say, a hospital and a web host. If you fall into one of these categories, start from the industry page rather than the product page — it will frame which combination of XDR, MDR, DNS Firewall, and training is relevant.

How to decide whether it fits

CIRA's own positioning is that it is a not-for-profit building "a safer internet for all Canadians," and its cybersecurity arm sits alongside its .CA registry and Net Good programs. That is a useful signal about fit: CIRA is oriented toward Canadian organizations and public-interest infrastructure, not toward global consumer security software.

Two practical checks before you commit:

  1. Map your gap to a product. If you already have endpoint detection but no DNS-layer control, DNS Firewall or Canadian Shield is the natural entry. If you have tools but no one to run them, MDR is the entry.
  2. Confirm scope and pricing directly. The site does not publish pricing or plan tiers for these services. Do not assume any of them are free or included with a .CA domain registration — they are separate offerings. Use the "Book a meeting" route to get a scoped proposal.

Common sticking points

  • Confusing the registry role with the security role. CIRA manages the .CA domain registry and sells cybersecurity services. Registering a .CA domain does not enroll you in XDR, MDR, or DNS Firewall.
  • Assuming Canadian Shield is only for networks. It is now available across Windows, macOS, iOS, and Android, so device-level coverage is an option.
  • Treating "Cyber Stack" as a single SKU. It reads as a bundle concept; verify which components are included in any quote you receive.