The Nonprofit Security Grant Pays For Cameras, Doors, And Blast Film — But It Runs Through Your State, Not FEMA, And That Trips Up First-Time Applicants Every Year.

For a synagogue, mosque, church, community center, museum, or social-service nonprofit weighing the cost of security cameras, reinforced doors, shatter-resistant window film, or an access-control system, there is a federal program built for exactly that expense — and many eligible organizations either don't know it exists or misunderstand how to apply. FEMA's Nonprofit Security Grant Program (NSGP) funds physical security enhancements and target hardening for nonprofit organizations at high risk of terrorist attack. In recent years it has distributed hundreds of millions of dollars annually, and the FY2026 cycle is moving through its application phase now, with awards anticipated in late summer 2026.

The program is genuinely valuable, but its structure is unusual in a way that catches first-time applicants off guard. NSGP is a federal program you almost never apply to federally. You apply through your state, on your state's calendar, against your state's instructions — and that pass-through structure is the first thing to understand.

Two tiers: NSGP-S and NSGP-UA

NSGP is split into two sub-programs that differ only by geography:

• NSGP-UA (Urban Area) funds nonprofits located within the federally designated Urban Areas Security Initiative (UASI) jurisdictions — the major metropolitan areas FEMA identifies as higher-risk.
• NSGP-S (State) funds nonprofits located outside those UASI urban areas, ensuring organizations in smaller cities and rural areas have access to the program.

In the most recent cycle, funding was split roughly evenly between the two tiers — on the order of $137 million each, for a combined program of roughly $274 million. Which tier you apply under is determined entirely by your physical location relative to your state's UASI boundaries; it is not a choice. Your State Administrative Agency will tell you which one applies to you.

What the money buys

NSGP is a target-hardening program, and the allowable costs reflect that focus. Eligible expenses typically include:

• Physical security equipment: security cameras and surveillance systems, access-control systems, lighting, fencing, gates, barriers, bollards, and alarm and notification systems.
• Building hardening: reinforced doors, locking systems, shatter-resistant or blast-mitigation window film, and other structural measures that delay or deter an attacker.
• Contracted security personnel (within program limits) and security training for staff and members.
• Planning and exercises tied to the organization's security posture.

Awards are commonly capped around $150,000 per site, and organizations operating multiple physical sites can, in many states, apply for more than one site (often up to three, for a combined ceiling in the range of $450,000) — subject to your state's specific rules. The program funds equipment and improvements, not general operating support; you cannot use NSGP to backfill a budget gap or fund unrelated programming.

The structure that trips people up: you apply through your state

Here is the feature that surprises nearly every first-time applicant. FEMA does not take NSGP applications directly from nonprofits. Instead, FEMA passes the funding to each State Administrative Agency (SAA) — the state homeland-security or emergency-management office — and the SAA runs the competition within the state. The SAA sets its own application deadline (which is earlier than FEMA's downstream deadlines and varies significantly state to state), collects and scores applications, and forwards a prioritized list to FEMA.

The practical consequences are decisive:

1. Your real deadline is your state's SAA deadline, not a national FEMA date. These deadlines cluster in the spring and early summer and differ by weeks across states. Several states' FY2026 windows have already closed; others remain open. The first action for any prospective applicant is to find your SAA's NSGP page and confirm its calendar — do not assume a generic federal deadline applies to you.
2. Your state's instructions govern. Site limits, formatting requirements, required attachments, and submission portals are set at the state level within FEMA's framework. Follow your SAA's guidance, not a neighboring state's.
3. Missing this cycle means waiting a year. Because the program runs annually through the states, an organization that misses its SAA deadline should immediately begin preparing for next year's cycle — and the preparation work pays off because the core deliverables are reusable.

The two documents that decide everything

Two artifacts carry the weight of an NSGP application: the vulnerability/risk assessment and the Investment Justification (IJ).

The vulnerability assessment is the evidentiary foundation. It documents the specific threats and risks your organization faces and identifies the vulnerabilities your requested investments will address. A credible assessment is concrete and specific to your facility — entry points, sightlines, prior incidents or threats against your organization or your community, and the gaps in your current security posture. Many organizations obtain this through a professional assessment or a law-enforcement walkthrough; some states provide tools or partners. A vague, generic risk narrative is the most common reason strong organizations score poorly.

The Investment Justification is the proposal itself, and it must do three things tightly: (1) describe the threat and risk your organization faces, grounded in the assessment; (2) specify the security measures you will purchase and how each one mitigates a documented vulnerability; and (3) connect the dots explicitly — every requested item should map to a named risk. Reviewers are evaluating whether your spending plan is a coherent response to a demonstrated threat, not a wish list of equipment. An IJ that asks for cameras and reinforced doors without tying each to a specific, assessed vulnerability reads as unmotivated and scores accordingly.

How to build a fundable application

Whether you are racing an open SAA deadline or preparing for next year, the workflow is the same:

1. Find your SAA and its NSGP page first. Confirm your deadline, your tier (NSGP-S vs NSGP-UA), and your state's specific instructions before anything else.
2. Get a real vulnerability assessment. This is the foundation everything else rests on. Engage a professional or local law enforcement; make it specific to your site.
3. Write the Investment Justification as a threat-to-mitigation chain. State the risk, name the vulnerability, specify the measure, and explain the mitigation — for every requested item.
4. Register on SAM.gov early. Selected projects still require federal registration; a lapsed or missing SAM.gov record can derail an otherwise-funded award.
5. Reuse and improve. The vulnerability assessment and IJ are durable assets. An organization that applies thoughtfully one year is far stronger the next, even if the first attempt isn't funded.

The bottom line

The Nonprofit Security Grant Program is among the most directly useful federal grants available to faith communities and mission-driven nonprofits — up to roughly $150,000 per site for the cameras, doors, barriers, and hardening that protect people and places at risk. The structural trap is that it runs through your State Administrative Agency on the state's calendar, so your deadline is local and easy to miss. Win it by grounding a specific Investment Justification in a real vulnerability assessment, and by finding your SAA's instructions before you write a word.

To track FEMA, homeland-security, and nonprofit funding opportunities and build a competitive application, start with Granted.