Digital Europe Programme · European Union
Open
The EU's Digital Europe Programme programme expects to make awards, from a total budget of €2 million. Applications close on 16 Mar 2027 (EU calls usually close at 17:00 Brussels time).
World-class National Cyber Hubs across the Union, supported by state-of-the-art technology, acting as clearing houses for detecting, gathering and storing data on cybersecurity threats, analysing this data, and sharing and reporting CTI, reviews and analyses, taking into account well-established standards for sharing and automation processes.
Threat intelligence and situational awareness capabilities and capacity building supporting strengthened collaboration between cybersecurity actors, including private and public actors.
• Targeted training courses on the basis of the ECSF to improve the capacity of cyber security roles.
• Applications for automated notification of private and public actors about compromised or insecure systems
Objective:
Where a Member State decides to participate in the European Cybersecurity Alert System, it shall designate or, where applicable, establish a National Cyber Hub, a single entity acting under the authority of the Member State.
National Cyber Hubs have the capacity to act as a reference point and gateway to other public and private organisations at national level for collecting and analysing information on cyber threats and incidents and to contribute to a Cross-Border Cyber Hub. They are capable of detecting, aggregating, and analysing data and information relevant to cyber threats and incidents, such as cyber threat intelligence, by using in particular state-of-the-art technologies, and with the aim of preventing incidents.
For the following programming cycle, the emphasis is on continuation of activities initiated during past years.
The objective is to create or strengthen National Cyber Hubs, with state-of-the-art tools for monitoring, understanding and proactively managing cyber events, in close collaboration with relevant entities such as CSIRTs, ISACs, etc. They will also, where possible, benefit from information and feeds from other Cyber Hubs in their countries and use the aggregated data and analysis to deliver early warnings to targeted critical infrastructures on a need-to-know basis. National Cyber Hubs could also consider the possibility of monitoring undersea infrastructure, such as submarine cables.
The aim is to build capacity for new or existing National Cyber Hubs, e.g. equipment, tools, data feeds, as well as costs related to data analysis, interconnection with Cross-Border Cyber Hubs, etc. This can include for example automation, analysis and correlation tools and data feeds covering Cyber Threat Intelligence (CTI) at various levels, ranging from field data to Security Information and Event Management (SIEM) data to higher level CTI. Automation is a key aspect in the efficient handling and processing of information. Where available, already established standards should be used, such as the Common Security Advisory Framework (CSAF) 1 , for security advisories or for collecting and processing cybersecurity-related messages (e.g. IntelMQ project 2 ). Applications developed by Cyber Hubs/SOCs should be compatible with European standardisation projects like the EU vulnerability database (EUVD). National Cyber Hubs should also leverage state-of-the-art technology such as artificial intelligence and dynamic learning of the threat landscape and context. This also includes the use of shared cybersecurity information, to the extent possible based on existing taxonomies and/or ontologies, and hardware to ensure the secure exchange and storage of information. The operations should be built upon live network data and other training data required in the initial phases. Where relevant, consideration should be given to SMEs as the ultimate recipients of cybersecurity operational information.
A key element is the translation of advanced AI, data analytics and other relevant cybersecurity tools from research results to operational tools, and further testing and validating them in real conditions in combination with access to supercomputing facilities (e.g. to boost the correlation and detection features of cross-border platforms). Such activities are identified and proposed for financing in section 2.3, dedicated to AI for Cybersecurity, and topic 2.3.1.
Furthermore, National Cyber Hubs could also consider deploying solutions for the surveillance and protection of critical undersea infrastructure, such as submarine cables, and the detection of malicious activities around them, to improve the resilience and security of this infrastructure, which is critical for global communications. The response to such hybrid threats could also include situational awareness performed through the collection and analysis of in situ, sea based sensor data as well as relevant satellite imagery. For such activities, operational synergies with the EU Copernicus Space Programme and in particular with its Security Service are required.
Another key role for National Cyber Hubs is to facilitate knowledge transfer and sharing, as well as support training initiatives for all needed cybersecurity roles the basis, for instance, of the European Cybersecurity Skills Framework (ECSF 3 ). For example, Cyber Hubs/SOCs dealing with critical infrastructures play a key role and should…
Artificial intelligence Capacity building Cyber-physical systems Cybersecurity Cybersecurity Domains Defence Real time data analytics TSI (Technical Specifications for Interoperability) Tag National Cyber Hub cyber threats detection information sharing preparedness and resilience of critical infrastructures response to cyber threats submarine cable security
Single-stage call. Next deadline 2027-03-16. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).
| Fact | Value | How we know | Taken from the source |
|---|---|---|---|
| Deadline | 16 March 2027 “Single-stage call. Next deadline 2027-03-16. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).” | official data field | 15 Nov 2026 |
| Amount per applicant | Unknown — not stated in the source we hold | unknown | — |
| Total budget | €2 million | official data field | 15 Nov 2026 |
| Funding rate | Unknown — not stated in the source we hold | unknown | — |
| Who can apply | Unknown — not stated in the source we hold | unknown | — |
| Where to apply | Read the topic conditions on the EU Funding & Tenders Portal for eligible countries, consortium requirements, budget and the application route. | read from the official text | 15 Nov 2026 |
Facts on this page come from the funder’s official data, taken on 14 Nov 2026. The funder's own documents, including later amendments, always take precedence.
The expected outcomes of this topic are : • Functional demonstrators of working AI chip prototypes (PCB-level) designed by EU fabless companies and physically integrated …
The expected outcomes of this topic are : • A common EU evaluation platform for AI chips and racks, with transparent KPIs, workloads and benchmark reports used for Chips …
Projects are expected to contribute to the following expected outcomes: • Advanced heterogeneous integration, particularly in 2.5D and 3D packaging and integrated photoni…
The types of deliverables are presented in two parts. The first part covers: • Enhanced cooperation, preparedness and cybersecurity resilience in the EU; preparedness sup…
• Deployment of Artificial Intelligence and various AI-powered technologies as enablers for Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others. • Novel cybersecurity tools b…