Digital Europe Programme · European Union
Open
The EU's Digital Europe Programme programme expects to make 4 awards of €3 million – €5 million each, from a total budget of €15 million. Applications close on 14 Jan 2027 (EU calls usually close at 17:00 Brussels time).
• Deployment of Artificial Intelligence and various AI-powered technologies as enablers for Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others.
• Novel cybersecurity tools based on AI that have been developed, tested and validated in relevant conditions and made available to Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others.
• Enhanced information sharing and collaboration amongst National and Cross-Border Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others relevant stakeholders, supported by CTI produced by AI-powered tools.
• Tools for automation of cybersecurity processes such as the creation, analysis and processing of CTI, to enhance operations of the Cyber Hubs.
• Original European CTI feeds or services.
• Ensure that the most advanced and innovative secure AI solutions are developed and implemented for NIS sectors.
• Secure AI solutions and tools, complying with EU legislation. Promote the mitigation of risks associated with the misuse of AI by malicious actors, with a focus on AI ethics and secure deployment.
• Contribution to the standardisation and certification of cybersecure, trustworthy AI technologies.
Objective:
This topic addresses AI-based technologies (including GenAI) for national authorities and competent authorities, including National and Cross-Border Cyber Hubs, CSIRTs, public bodies and private entities from the NIS 2 directive, NCCs [1], etc. They play a key role in providing central operational capacity to European cybersecurity ecosystems. They may also provide primary input data for AI/ML-based cybersecurity tools and solutions, which can strengthen such authorities’ capacity to analyse, detect and prevent cyber threats and incidents, and to support the production of high-quality intelligence on cyber threats. In particular, the adoption of generative AI [2] could be a challenge and an opportunity for cybersecurity [3] processes and applications.
These enabling technologies should allow for more effective creation and analysis of Cyber Threat Intelligence (CTI), automation of large-scale processes, as well as faster and scalable processing of CTI and identification of patterns that allow for rapid detection and decision making.
The security of AI itself, especially for the systems in the learning phase, also needs to be addressed, including the misuse of AI by malicious actors. This includes carrying out risk assessments and mitigation of cybersecurity risks inherent to AI technologies, implementing supply chain security, etc., and…
Actions in this topic should develop and deploy systems and tools for cybersecurity[1], based on AI technologies[2], addressing aspects such as threat detection, vulnerability detection, threat mitigation, incident recovery through self-healing, data analysis and data sharing. These activities must also comply with intellectual property rights (IPR) and the GDPR, depending on the type of information handled. The AI solutions proposed should also be cybersecure.
Activities should include at least one of the following:
• Continuous detection of patterns and identification of anomalies that can potentially indicate emerging threats, recognising new attack vectors and enabling advanced detection in an evolving threat landscape, including in ICT or in Operational Technology infrastructures using open technologies.
• Creation of CTI based on novel threat detection capabilities
• Enhancing speed of incident response through real-time monitoring of networks to identify security incidents and generating alerts or triggering automated responses.
• Mitigating malware threats by analysing code behaviour, network traffic, and file characteristics, reducing the window of opportunity for attackers to exploit malware.
• Identification of vulnerabilities and support for management considering multiple sources of information.
• Cybersecure tools and solutions that provide risk-reduction in the crossover between AI, IoT and smart grids or other manufacturing chains.
• Support for recovery from incidents through self-healing capacities.
• Reducing the chances of attacks and pre-emptively identifying weaknesses through automated vulnerability scanning and penetration testing.
• Protecting business sensitive data through the analysis of access patterns and detection of abnormal behaviour.
• Enabling organisations to leverage and share CTI and other actionable information for analysis and insights without compromising data security and privacy, through anonymisation.
• Tools and solutions that provide product security or cybersecurity by design/default in line with CRA requirements.
• Tool and service providers are welcome to apply for this topic, also when in a consortium with Cyber Hubs. Links with stakeholders in the area of High-Performance Computing should be made where appropriate, as well as activities to foster networking with such stakeholders. In well justified cases, access requests to the EuroHPC high performance computing infrastructure could be granted.
• The systems, tools and services developed under this topic will be made available for licensing to National and/or Cross-Border Cyber Hubs platforms, CSIRTs, competent authorities, and other relevant authorities under favourable market conditions.
• These actions aim at providing AI-powered cybersecurity capabilities for National and/or Cross-Border Cyber Hubs and for national authorities encompassing Cyber Hubs, CSIRTs, which occupy a central role in ensuring the cybersecurity of national authorities…
Algorithmic auditability and accountability (e.g. explainable AI). Analytics tools Artificial Intelligence & Decision support Artificial intelligence Cybersecurity Cybersecurity Domains Data Security and Privacy Data protection Machine learning, statistical data processing and applications using signal processing (e.g. speech, image, video) Managerial, procedural and technical aspects of network security Privacy by design Security analytics and visualization Trust in decision making algorithms Trustworthy ICT AI Security Artificial Intelligence (AI) Cloud Security Cyber Threat Intelligence (CTI) Cyber-physical Systems Data Security & Privacy
Single-stage call. Next deadline 2027-01-14. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).
| Fact | Value | How we know | Taken from the source |
|---|---|---|---|
| Deadline | 14 January 2027 “Single-stage call. Next deadline 2027-01-14. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).” | official data field | 15 Nov 2026 |
| Amount per applicant | Unknown — not stated in the source we hold | unknown | — |
| Total budget | €15 million | official data field | 15 Nov 2026 |
| Funding rate | Unknown — not stated in the source we hold | unknown | — |
| Who can apply | Unknown — not stated in the source we hold | unknown | — |
| Where to apply | Read the topic conditions on the EU Funding & Tenders Portal for eligible countries, consortium requirements, budget and the application route. | read from the official text | 15 Nov 2026 |
Facts on this page come from the funder’s official data, taken on 14 Nov 2026. The funder's own documents, including later amendments, always take precedence.
The expected outcomes of this topic are : • Functional demonstrators of working AI chip prototypes (PCB-level) designed by EU fabless companies and physically integrated …
The expected outcomes of this topic are : • A common EU evaluation platform for AI chips and racks, with transparent KPIs, workloads and benchmark reports used for Chips …
Projects are expected to contribute to the following expected outcomes: • Advanced heterogeneous integration, particularly in 2.5D and 3D packaging and integrated photoni…
The types of deliverables are presented in two parts. The first part covers: • Enhanced cooperation, preparedness and cybersecurity resilience in the EU; preparedness sup…
Depending on the decision of each NCC, one or more of the following should be covered: • Network of national initiatives to accelerate the cybersecurity industry and faci…