Cybersecure tools, technologies and services relying on AI
Open
This is the status published by the official source.
Expected Outcome:
• Deployment of Artificial Intelligence and various AI-powered technologies as enablers for Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others.
• Novel cybersecurity tools based on AI that have been developed, tested and validated in relevant conditions and made available to Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others.
• Enhanced information sharing and collaboration amongst National and Cross-Border Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others relevant stakeholders, supported by CTI produced by AI-powered tools.
• Tools for automation of cybersecurity processes such as the creation, analysis and processing of CTI, to enhance operations of the Cyber Hubs.
• Original European CTI feeds or services.
• Ensure that the most advanced and innovative secure AI solutions are developed and implemented for NIS sectors.
• Secure AI solutions and tools, complying with EU legislation. Promote the mitigation of risks associated with the misuse of AI by malicious actors, with a focus on AI ethics and secure deployment.
• Contribution to the standardisation and certification of cybersecure, trustworthy AI technologies. Objective:
This topic addresses AI-based technologies (including GenAI) for national authorities and competent authorities, including National and Cross-Border Cyber Hubs, CSIRTs, public bodies and private entities from the NIS 2 directive, NCCs [1], etc. They play a key role in providing central operational capacity to European cybersecurity ecosystems. They may also provide primary input data for AI/ML-based cybersecurity tools and solutions, which can strengthen such authorities’ capacity to analyse, detect and prevent cyber threats and incidents, and to support the production of high-quality intelligence on cyber threats. In particular, the adoption of generative AI [2] could be a challenge and an opportunity for cybersecurity [3] processes and applications.
These enabling technologies should allow for more effective creation and analysis of Cyber Threat Intelligence (CTI), automation of large-scale processes, as well as faster and scalable processing of CTI and identification of patterns that allow for rapid detection and decision making.
The security of AI itself, especially for the systems in the learning phase, also needs to be addressed, including the misuse of AI by malicious actors. This includes carrying out risk assessments and mitigation of cybersecurity risks inherent to AI technologies, implementing supply chain security, etc., and complying with the AI Act, intellectual property legislation and the GDPR.
In addition to being secure, the AI technologies being developed should perform well, and be robust and trustworthy. In particular, having trustworthy AI solutions will help in the deployment phase, where social acceptance is essential.
[1] If applicable and in line with individual national strategies.
[2] Cybersecurity in the age of generative AI, September 2023, available at: https://www.mckinsey.com/featured insights/themes/cybersecurity-in-the-age-of-generative-ai.
[3] The Need For AI-Powered Cybersecurity to Tackle AI-Driven Cyberattacks, April 2024, available at: https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2024/the-need-for-ai-powered cybersecurity-to-tackle-ai-driven-cyberattacks.
Scope:
Actions in this topic should develop and deploy systems and tools for cybersecurity[1], based on AI technologies[2], addressing aspects such as threat detection, vulnerability detection, threat mitigation, incident recovery through self-healing, data analysis and data sharing. These activities must also comply with intellectual property rights (IPR) and the GDPR, depending on the type of information handled. The AI solutions proposed should also be cybersecure.
Activities should include at least one of the following:
• Continuous detection of patterns and identification of anomalies that can potentially indicate emerging threats, recognising new attack vectors and enabling advanced detection in an evolving threat landscape, including in ICT or in Operational Technology infrastructures using open technologies.
• Creation of CTI based on novel threat detection capabilities
• Enhancing speed of incident response through real-time monitoring of networks to identify security incidents and generating alerts or triggering automated responses.
• Mitigating malware threats by analysing code behaviour, network traffic, and file characteristics, reducing the window of opportunity for attackers to exploit malware.
• Identification of vulnerabilities and support for management considering multiple sources of information.
• Cybersecure tools and solutions that provide risk-reduction in the crossover between AI, IoT and smart grids or other manufacturing chains.
• Support for recovery from incidents through self-healing capacities.
• Reducing the chances of attacks and pre-emptively identifying weaknesses through automated vulnerability scanning and penetration testing.
• Protecting business sensitive data through the analysis of access patterns and detection of abnormal behaviour.
• Enabling organisations to leverage and share CTI and other actionable information for analysis and insights without compromising data security and privacy, through anonymisation.
• Tools and solutions that provide product security or cybersecurity by design/default in line with CRA requirements.
• Tool and service providers are welcome to apply for this topic, also when in a consortium with Cyber Hubs. Links with stakeholders in the area of High-Performance Computing should be made where appropriate, as well as activities to foster networking with such stakeholders. In well justified cases, access requests to the EuroHPC high performance computing infrastructure could be granted.
• The systems, tools and services developed under this topic will be made available for licensing to National and/or Cross-Border Cyber Hubs platforms, CSIRTs, competent authorities, and other relevant authorities under favourable market conditions.
• These actions aim at providing AI-powered cybersecurity capabilities for National and/or Cross-Border Cyber Hubs and for national authorities encompassing Cyber Hubs, CSIRTs, which occupy a central role in ensuring the cybersecurity of national authorities, providers of critical infrastructures and essential services. These entities are tasked with monitoring, understanding and proactively managing cybersecurity threats. In light of their crucial operative role in ensuring cybersecurity in the Union, the nature of the technologies involved as well as the sensitivity of the information handled, Cyber Hubs must be protected against possible dependencies and vulnerabilities in cybersecurity to pre-empt foreign influence and control.
• Tools to protect and secure AI solutions in line with the EU legislative framework and considering integration of requirements for robustness, performance, trust and balanced AI autonomy.
• Contribute to the cybersecurity certification of AI-driven cybersecurity solutions and systems. The primary objective of cybersecurity certification for AI systems within the EU is twofold: to mitigate cybersecurity risks inherent in AI technologies and to demonstrate compliance with the EU’s comprehensive legislative framework, including the AI Act. By establishing a standardised, transparent, and rigorous certification process, the EU seeks to foster trust in AI technologies among users, developers, and regulators alike. [1] Multilayer Framework for Good Cybersecurity Practices for AI, ENISA, June 2023, available at: https://www.enisa.europa.eu/publications/multilayer-framework-for-good-cybersecurity-practices-for-ai.
[2] Cybersecurity of AI and Standardisation, ENISA, March 2023, available at: https://www.enisa.europa.eu/publications/cybersecurity-of-ai-and-standardisation.
- Status
- Open
- Deadline
- (time not stated)
- Opens
- Published
- Total budget
- €15,000,000
- Grant range
- €3,000,000 – €5,000,000
- Country
- European Union (EU-wide)
- Programme
- Digital Europe Programme (DIGITAL)
- Funder
- European Commission
- Official page
- Open at the source portal
What applying involves
10 steps, all of them taken from this call's own documents.
Understand the call
- Read the call on the source portal and download its documents
-
Write the proposal against the award criteria and thresholds
standard for this programme
described in section 9 of the call document — conditions §5b
-
Check the grant's legal and financial set-up
standard for this programme
described in section 10 of the call document . Call document and annexes: Call document Application form templates Standard application form (DEP) — the application form specific to this call is available in the Submission System Ownership control declaration Model Grant Agreements (MGA) DEP MGA Additional documents: Digital Europe Cybersecurity Work Programme 2025-2027 DEP Regulation 2021/964 EU Financial Regulation 2024/2509 Rules for Legal Entity Validation, LEAR … — conditions §6
- Check the amount you plan to request against the call's range
Check you are eligible
-
Check every partner is established in an eligible country
standard for this programme
described in section 6 of the call document — conditions §2
-
Meet the call's other eligibility conditions
standard for this programme
described in section 6 of the call document — conditions §3
-
Be able to show financial and operational capacity
standard for this programme
described in section 7 of the call document — conditions §4
Prepare the documents
-
Prepare Part B of the Application Form
standard for this programme
Proposal page limits and layout: described in Part B of the Application Form available in the Submission System. — conditions
Submit
-
Check the submission and evaluation process
described section 8 of the call document and the Online Manual — conditions §5a
-
Submit before the closing date shown above
The source states the closing day but no closing time — check the portal before the last day. — calls.deadline
Other calls under Digital Europe Programme (DIGITAL)
- Dual-use technologies
- Strengthening cybersecurity capacities of European SMEs with cybersecure AI-powered solutions
- Strengthening EU cybersecurity capacities & capabilities in line with legislative requirements
- Enhancing the NCC Network
- Regional Cable Hubs
- Coordinated preparedness testing and other preparedness actions
- AI chip demonstrators for EU compute infrastructure
- AI compute evaluation and deployment platform for EU infrastructure
All calls under this programme
Similar opportunities
- Strengthening cybersecurity capacities of European SMEs with cybersecure AI-powered solutions
- Artificial Intelligence for Cybersecurity applications
- Enhancing the Security, Privacy and Robustness of AI Models and Systems (SecureAI)
- AI integration in CCSI work practice: catalysing innovation and competitiveness
- AI4Creatives Support Platform: embracing a fair AI revolution
- Capacity building of Security Operation Centres
Where this came from
- Source document
- https://ec.europa.eu/info/funding-tenders/opportunities/data/topicDetails/digital-eccc-2027-deploy-cyber-11-cyberai.json
- Document fingerprint
08c5a13435564599(SHA-256, first 16 hex characters)- Collected
- First recorded here
What has changed
- url first recorded as https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/topic-details/digital-eccc-2027-deploy-cyber-11-cyberai on
- currency first recorded as EUR on
- amount_max first recorded as 5000000.00 on
- amount_min first recorded as 3000000.00 on
- budget_total first recorded as 15000000.00 on
- deadline first recorded as 2027-01-14 on
- opens_on first recorded as 2026-09-01 on
- published_on first recorded as 2026-09-01 on
- status_basis first recorded as source_status on
- status first recorded as open on
- title first recorded as Cybersecure tools, technologies and services relying on AI on
Data source
© European Union, 2026. Source: EU Funding & Tenders Portal. Reused under Commission Decision 2011/833/EU — CC BY 4.0.
We collected this from the source on .
The source last changed this record on Tue, 01 Sep 2026 08:18:24 GMT.
Personal data of natural persons has been dissociated by quiescence.eu.
This service is not affiliated with, sponsored or endorsed by the data publishers.