At SafetySync, we help faith communities and nonprofits close that gap without losing what makes them welcoming. We are a Norfolk, Virginia security consulting firm founded by a federal law enforcement veteran, national security professional, and graduate of the FBI National Academy. We conduct FEMA and CISA-aligned vulnerability assessments and prepare the supporting documentation that helps turn those findings into funded security improvements, most often through the federal Nonprofit Security Grant Program (NSGP).
If you have ever asked whether your synagogue, church, mosque, temple, gurdwara, day school, or religious community center is doing enough, and whether there is funding to help, this guide is written for you.
What the Nonprofit Security Grant Program actually pays for
Real dollars for real security. The Nonprofit Security Grant Program is a Department of Homeland Security grant, administered in Virginia through the Virginia Department of Emergency Management (VDEM), that funds physical security improvements for nonprofits at risk of a terrorist or targeted-violence attack. Awards can reach up to $200,000 per site, and an organization operating multiple locations can apply for more than one site in a single cycle.
Specific categories, not general funds. The program does not hand out cash for general operations. It funds specific, security-related categories: equipment such as cameras, access-control hardware, reinforced doors and window film, and lighting; contracted security services; training and exercises; and planning. Every dollar has to trace back to a documented vulnerability and a proposed fix.
This is where applications win or lose. NSGP is competitive and scored, and a large share of an application's score rests on demonstrated risk, meaning the threat your organization faces combined with the vulnerabilities a reviewer can see in your documentation. A strong, professionally prepared vulnerability assessment is the single most valuable piece of supporting material you can submit.
Why a professional vulnerability assessment matters
More than a checklist. A vulnerability assessment is a structured walkthrough of your property and your operations, measured against recognized federal standards rather than a generic checklist. Done properly, it answers three questions for every part of your facility: What is the realistic threat? Where are we exposed? And what would the consequences be if something happened here?
Built on the standards reviewers expect. SafetySync builds every assessment on the same risk formula federal reviewers look for, Risk = Threat × Vulnerability × Consequence, and aligns the vocabulary and categories with the CISA Infrastructure Survey Tool and FEMA's preparedness guidance, including DHS/CISA's "Mitigating Attacks on Houses of Worship" and its K-12 school security guidance where a school is involved. That alignment is not window dressing. It is the language grant reviewers read in, and it signals that the assessment was written by a working practitioner, not generated from a template.
Grounded in what we actually see. The finished report walks through perimeter security, access control, surveillance systems, and emergency preparedness; personnel and volunteer security; and operational practices like security policies and coordination with local law enforcement. Each finding is tied to something we actually observed during the walkthrough, rated on a defensible scale, and matched to a recommended fix with a realistic cost band and its NSGP eligibility. Nothing is invented, and nothing is left as a vague "you should probably improve this."
From assessment to funded project: how the process works
We do the assessment groundwork. The path from "we're worried about security" to "we have funded improvements installed" is more manageable than it looks, and we provide the professional assessment documentation that anchors a strong application, so your staff and volunteers can stay focused on their mission.
One walkthrough, one consistent story. The engagement usually moves through a few clear stages. We start with an on-site walkthrough of your facility, ideally with someone who knows the building and the congregation. From there we produce the written vulnerability assessment, prioritizing findings by urgency so you know what needs attention in thirty days versus what can wait six months. When the NSGP window opens, the assessment's findings and cost estimates give you the foundation for your Investment Justification, the narrative FEMA requires that explains what you want to buy, why, and how it reduces risk, and we advise you as you prepare it. Because your application is built on a clear, standards-based assessment, the story stays consistent from the first observation to the final budget line, which is exactly what reviewers reward.
One assessment, multiple funding doors. The same document that qualifies you for NSGP can support applications to other federal and state programs, so the work you invest in getting it right pays off in more than one direction.
What SafetySync brings to the table
A federal investigator's perspective. SafetySync was founded by a security professional with more than two decades in federal law enforcement and security leadership. He is a graduate of the FBI National Academy, a former U.S. Army officer, and holds a Master of Public Safety from the University of Virginia. That background shapes how every assessment is written: findings are grounded in how threats actually develop and how attacks actually unfold, not in fear or in a vendor's product catalog.
Local, and here for the long haul. SafetySync is headquartered in Norfolk and serves the Hampton Roads region, including Virginia Beach, Chesapeake, Portsmouth, Suffolk, Hampton, Newport News, Williamsburg, and the surrounding communities, as well as organizations across Virginia. Being local means we can walk your property in person, sit down with your board, and stay reachable through the life of the grant, rather than parachuting in from another state and disappearing after the report is delivered.
Frequently asked questions
Do we qualify for NSGP? Most 501(c)(3) nonprofits that can articulate a reason they might be targeted, whether because of their faith, their identity, their mission, or their visibility, are eligible to apply. Eligibility and deadlines are set by DHS and administered through VDEM, and the specifics can shift year to year, so the safest first step is a short conversation about your organization before a cycle opens.
When should we start? Before the application window opens, not after. NSGP cycles tend to open with a short turnaround, and organizations that already have a current vulnerability assessment in hand can move quickly while others are still scrambling. Preparing during the quiet period is the single biggest advantage you can give yourself.
What if we don't get the grant, or don't want to apply? The assessment stands on its own. It gives your leadership a clear, prioritized picture of where you are exposed and what it would cost to fix, information that is valuable whether the improvements are funded by a grant, your own budget, a denominational fund, or insurance-driven requirements.
Is this just for large organizations? No. Small congregations and nonprofits are often the most exposed and the least sure where to begin. The assessment scales to your facility, and many of the highest-impact recommendations are modest in cost.
Can you help schools and community centers, not just houses of worship? Yes. Faith-based and independent day schools, JCCs, and community centers are all eligible for this work, and we align school assessments with DHS/CISA's K-12 school security guidance.