cira.ca

CIRA offers cybersecurity services through two main tracks: managed detection and response products (XDR, MDR, DNS Firewall), plus awareness training and DNS infrastructure services like Anycast DNS and CIRA Canadian Shield. These are aimed at organizations — enterprises, SMBs, and public-sector bodies such as schools, healthcare providers, and municipalities — rather than individual consumers. If you are evaluating whether CIRA fits your organization, the practical next step is a scoping conversation: CIRA's site provides a "Book a meeting" option to get guidance.

The product lineup

CIRA groups its cybersecurity offerings under a few headings:

• XDR (Extended Detection and Response) — threat detection and response across your environment.
• MDR (Managed Detection and Response) — a managed service layer for detection and response.
• DNS Firewall — filtering and blocking at the DNS layer.
• Cybersecurity Awareness Training — staff-facing training to reduce human-risk exposure.
• Anycast DNS — DNS resolution infrastructure, listed under both cybersecurity and registry services.
• TLD Anycast — anycast DNS for top-level domains, aimed at registry operators.
• CIRA Canadian Shield — a protective DNS service, now available across Windows, macOS, iOS, and Android devices.

CIRA also frames these as a "CIRA Cyber Stack," which suggests the products are intended to be combined rather than bought as isolated point tools.

Who each service is for

The right entry point depends on what you are trying to solve:

Solutions by industry and organization size

CIRA organizes its cybersecurity offerings by sector as well as by product:

• Education
• Healthcare
• Municipalities
• Hosting providers, registrars, MSPs, and resellers
• Enterprise and SMB

This matters because the compliance, procurement, and threat profile differ sharply between, say, a hospital and a web host. If you fall into one of these categories, start from the industry page rather than the product page — it will frame which combination of XDR, MDR, DNS Firewall, and training is relevant.

How to decide whether it fits

CIRA's own positioning is that it is a not-for-profit building "a safer internet for all Canadians," and its cybersecurity arm sits alongside its .CA registry and Net Good programs. That is a useful signal about fit: CIRA is oriented toward Canadian organizations and public-interest infrastructure, not toward global consumer security software.

Two practical checks before you commit:

1. Map your gap to a product. If you already have endpoint detection but no DNS-layer control, DNS Firewall or Canadian Shield is the natural entry. If you have tools but no one to run them, MDR is the entry.
2. Confirm scope and pricing directly. The site does not publish pricing or plan tiers for these services. Do not assume any of them are free or included with a .CA domain registration — they are separate offerings. Use the "Book a meeting" route to get a scoped proposal.

Common sticking points

• Confusing the registry role with the security role. CIRA manages the .CA domain registry and sells cybersecurity services. Registering a .CA domain does not enroll you in XDR, MDR, or DNS Firewall.
• Assuming Canadian Shield is only for networks. It is now available across Windows, macOS, iOS, and Android, so device-level coverage is an option.
• Treating "Cyber Stack" as a single SKU. It reads as a bundle concept; verify which components are included in any quote you receive.

CIRA's Net Good program is the not-for-profit side of the Canadian Internet Registration Authority: it covers grants for internet-improving projects, the Internet Performance Test, CIRA Canadian Shield, network resilience work, and policy engagement. The Internet Performance Test is the measurement tool within that group — it lets you check the performance of an internet connection. Both sit under CIRA's stated goal of building a better online Canada, alongside its core job of managing the .CA domain registry.

What CIRA is, in one paragraph

CIRA describes itself as "Canada's internet." It manages the .CA country-code top-level domain, and it also sells cybersecurity and internet performance services. Because it is structured as a not-for-profit, the Net Good activities are presented as the public-benefit arm of the organization rather than as commercial products.

Net Good: the five areas

CIRA's site groups Net Good into five items:

CIRA Grants

Grants are the clearest expression of the non-profit mission: CIRA funds projects that aim to make Canada's internet better. The site presents this as "apply for a CIRA Grant," with the grants sitting inside the Net Good section rather than the commercial product catalog.

If you are considering applying, treat the grant as a project-funding program tied to internet improvement in Canada, and check CIRA's own grant pages for current eligibility, amounts, and deadlines — the homepage does not state them.

Internet Performance Test

The Internet Performance Test measures how an internet connection is performing. It is listed as part of Net Good, which tells you the intended purpose: giving Canadians data about connection quality, not selling a connectivity product.

A practical way to think about it: if you want an objective read on whether your connection delivers what you expect, this is the CIRA tool for that job. The homepage does not specify which metrics it reports or which platforms it runs on, so confirm those on the test's own page before relying on it for a specific measurement.

CIRA Canadian Shield

Canadian Shield is the other Net Good item most people will actually use. CIRA states it is now available across Windows, macOS, iOS, and Android devices. It is positioned as a way to help Canadians stay safer online, and it appears both under Net Good and under CIRA's cybersecurity offerings.

Network resilience and policy engagement

These two are less about tools you download and more about CIRA's role in the internet ecosystem: work on keeping networks dependable, and participation in policy discussions affecting Canada's internet. They are worth knowing about if you are trying to understand why a domain registry runs grants and measurement projects at all — it is the not-for-profit mandate in practice.

How the pieces fit together

• Commercial side: .CA domains, cybersecurity products (XDR, MDR, DNS Firewall, awareness training, Anycast DNS), registry services for gTLDs and ccTLDs.
• Net Good side: grants, Internet Performance Test, Canadian Shield, network resilience, policy engagement.

The same organization runs both, which is why Canadian Shield shows up in two places on the site. If your interest is public-benefit work, Net Good is the section to read. If your interest is a product or a domain, use the .CA domains or Cybersecurity sections instead.

What to check before you act

• For a grant: go to CIRA's grant page for eligibility, funding ranges, and application windows — none of these are stated on the homepage.
• For the Internet Performance Test: open the test itself to see what it measures and on which devices.
• For Canadian Shield: confirm current platform support and any account requirements on its own page; the homepage confirms Windows, macOS, iOS, and Android availability but not pricing or sign-in terms.
• For cybersecurity services generally: CIRA offers a "Book a meeting" path and lists solutions by industry (education, healthcare, municipalities, hosting/registrars/MSPs and resellers, enterprise and SMB), which is the route to take if you need a scoped answer rather than a self-serve tool.

CIRA is the Canadian Internet Registration Authority, the not-for-profit organization that manages the .CA domain name registry and describes itself as "Canada's internet." It handles .CA domain registration and WHOIS, sells and supports .CA domains through registrars, and also offers cybersecurity, registry, and internet performance services. If you want a .CA domain, need Canadian-focused cybersecurity services, or are looking for grants and internet measurement tools, CIRA is the organization behind them.

The .CA domain registry

CIRA's core role is running the registry for .CA, Canada's country-code top-level domain. On its site, the .CA domains section covers:

• Choose a .CA domain and How to register — guidance for getting a .CA name.
• WHOIS — lookup of domain registration information.
• To Be Released (TBR) — the process for domains that are becoming available.
• .CA success stories — examples of Canadian sites using .CA.
• Sell .CA domains — resources for registrars and resellers.

The practical takeaway: you don't register a .CA domain directly from CIRA as an end user in most cases — you go through a registrar. CIRA is the registry underneath that system, and its site explains the process and provides the lookup and release tools.

Cybersecurity and internet performance

Beyond domains, CIRA offers cybersecurity products and services aimed at organizations:

• XDR and MDR — extended and managed detection and response.
• DNS Firewall — DNS-layer threat blocking.
• Cybersecurity Awareness Training — staff training.
• Anycast DNS and TLD Anycast — DNS and registry infrastructure services.
• CIRA Canadian Shield — a protective DNS service, now available across Windows, macOS, iOS, and Android devices.

CIRA also organizes these by industry, including education, healthcare, municipalities, hosting/registrars/MSPs and resellers, and enterprise and SMB, and bundles offerings as the CIRA Cyber Stack. If your organization is asking "Do I need cybersecurity services?", CIRA frames its products as a way to build a safer internet for Canadians and offers a meeting to discuss fit.

Registry services for other domains

CIRA doesn't only run .CA. Its Registry services section covers a registry platform plus gTLDs (generic top-level domains) and ccTLDs (country-code top-level domains). This means other domain operators can use CIRA's registry technology rather than building their own.

Net Good and public-interest work

As a not-for-profit, CIRA runs programs that go beyond commercial services:

• Net Good Grants — funding for projects that improve Canada's internet (you can apply for a CIRA Grant).
• Internet Performance Test — a tool for measuring internet connection performance.
• CIRA Canadian Shield — free protective DNS for Canadians.
• Network resilience and policy engagement — work on internet infrastructure and public policy.

CIRA also publishes research and commentary, such as a survey finding that Canadian organizations are spending more on cybersecurity but fewer believe it's enough, and practical safety guides like "Five simple ways to stay safer online."

Membership and governance

CIRA is member-based and publishes its history, leadership, board, governance and transparency, board election, membership perks, AGM, careers, and legal, policy and compliance information. Members can participate in governance, including board elections. If you want a say in how Canada's internet registry is run, membership is the path.

Quick reference

When CIRA is relevant to you

• You want a .CA domain — start with CIRA's registration guidance, then use a registrar.
• You run an organization needing DNS or threat protection — review the cybersecurity products and industry-specific solutions.
• You operate a TLD or registry — look at CIRA's registry platform services.
• You have a project that improves Canada's internet — consider a Net Good Grant.
• You want to check a domain's registration — use WHOIS.

CIRA's site is available in English and French, with Resources and Support sections for further help.

You register a .CA domain through a CIRA-certified registrar, not directly from CIRA. CIRA (the Canadian Internet Registration Authority) manages the .CA registry and publishes the guidance, but the actual purchase happens at a registrar. This applies to anyone — individuals or organizations — who wants a Canadian top-level domain; you don't need to be a Canadian citizen or company to hold one.

What CIRA does vs. what a registrar does

It helps to separate the two roles before you start:

CIRA's site points you to "Choose a .CA domain" and "How to register" as the starting points, but the transaction itself is completed with a registrar.

Steps to register

1. Pick a name. Use CIRA's "Choose a .CA domain" tool to check availability and see suggestions.
2. Choose a CIRA-certified registrar. CIRA maintains a list of certified registrars; pricing, included services, and interface vary by registrar.
3. Check availability at the registrar. The registrar's search confirms whether the name is open, already registered, or pending release.
4. Complete the registration. You provide contact details and pay the registrar. The registrar submits the registration to CIRA's registry.
5. Verify the registration. Use CIRA's WHOIS lookup to confirm the domain is registered and see its status.
6. Configure DNS. Set nameservers or DNS records through your registrar (or your hosting provider) so the domain resolves.

Expected result: the domain appears in WHOIS as registered, and it resolves once DNS is configured.

Getting an already-registered or expired domain

If the name you want is taken, two paths exist:

• Contact the current registrant and negotiate a transfer, if they're willing.
• Wait for the To Be Released (TBR) process. CIRA runs TBR for .CA domains that have been deleted. When a domain enters TBR, certified registrars can attempt to register it on your behalf. TBR is competitive — multiple parties can bid for the same name — so if you want a specific expired domain, work with a registrar that handles TBR and understand that you may not win it.

Common snags

• Assuming CIRA sells domains directly. It doesn't; you always go through a registrar.
• Skipping the WHOIS check. WHOIS tells you whether a name is genuinely available or just looks available on a registrar's search.
• Forgetting renewals. A lapsed .CA domain can be deleted and then enter TBR, at which point you'd have to compete to get it back.
• Expecting TBR to be instant. Released domains go through the TBR process rather than becoming immediately available.

Quick decision guide

• New name, straightforward registration → pick a certified registrar and register.
• Name already registered → contact the registrant, or watch for it to enter TBR.
• Name expired/deleted → use a registrar that participates in TBR.
• Just checking status → use CIRA's WHOIS lookup.

A .CA domain is Canada's country-code top-level domain (ccTLD), managed by the Canadian Internet Registration Authority (CIRA). It's the right choice if you want your website to signal a Canadian identity — whether you're an individual, business, or organization targeting a Canadian audience. If your audience isn't Canadian and Canadian identity isn't part of your brand, a generic domain like .com may serve you just as well.

What .CA actually is

Every country has a two-letter ccTLD: .CA for Canada, .UK for the United Kingdom, .DE for Germany. CIRA is the registry — the organization that operates the .CA namespace and sets the rules for how it's registered and managed.

CIRA describes itself as "Canada's internet" and frames .CA as a way to "show off your Canadian pride from the get-go." That positioning matters: a .CA domain isn't just a technical address, it's a signal of Canadian presence.

CIRA also operates beyond the registry itself, offering cybersecurity products (XDR, MDR, DNS Firewall, Anycast DNS), a free consumer DNS service called CIRA Canadian Shield, an Internet Performance Test, and a grants program called Net Good. Those are separate from domain registration, but they're part of the same organization.

Who should use a .CA domain

The common thread: .CA works best when "Canadian" is part of what you're communicating.

How registration works

CIRA doesn't sell domains directly to the public. Instead, it operates the registry, and you register a .CA domain through an accredited registrar (the CIRA site links to "How to register" and "Choose a .CA domain" resources).

The general flow:

1. Check availability — search the domain you want through a registrar or CIRA's WHOIS lookup.
2. Confirm eligibility — .CA has Canadian presence requirements. CIRA's site links to a document covering who qualifies.
3. Register through a registrar — the registrar handles the transaction and your account.
4. Manage it — renewals, DNS settings, and contact info are handled through your registrar, with CIRA as the underlying registry.

CIRA also runs a To Be Released (TBR) process for .CA domains that have expired and are being made available again — relevant if you're chasing a specific name that's already taken.

What to check before you commit

• Canadian presence requirements. This is the single most important eligibility rule for .CA. CIRA publishes the specifics; confirm you qualify before planning around a .CA name.
• WHOIS accuracy. Your registration data needs to be correct and current.
• Registrar choice. Since CIRA doesn't sell directly, your registrar determines pricing, support, and the tools you'll use day to day. CIRA's site has a "Sell .CA domains" section aimed at registrars and resellers, which tells you the reseller channel is a normal part of the ecosystem.
• Whether you also want the matching .com or other TLDs. Many organizations register .CA alongside other domains to protect their brand.

The short version

.CA is Canada's ccTLD, run by CIRA. Choose it when Canadian identity is an asset to your site — for local businesses, Canadian-focused organizations, and anyone who wants a visible Canadian signal. Register through an accredited registrar, confirm you meet the Canadian presence requirements, and treat CIRA as the registry behind the scenes rather than the place you buy from.