Digital Europe Programme · European Union
Open
The EU's Digital Europe Programme programme expects to make awards, from a total budget of €2 million. Applications close on 16 Mar 2027 (EU calls usually close at 17:00 Brussels time).
• World-class Cross-Border Cyber Hubs across the Union for pooling data on cybersecurity threats between several Member States, equipped with a highly secure infrastructures and advanced data analytics tools for detecting, gathering and storing data on cybersecurity threats, analysing this data, and sharing and reporting CTI, reviews and analyses.
• Sharing of Threat Intelligence between National Cyber Hubs, and information sharing agreements with competent authorities and networks, including CSIRTs.
Objective:
The former Cross-border SOC platforms were financed during previous calls and such collaboration is envisaged for the Cross-Border Cyber Hubs. They should provide new additional capacity building upon and complementing existing SOCs/Cyber Hubs, Computer Security Incident Response Teams (CSIRTs), ISACs and other relevant actors.
This action is aimed mainly at new Cross-Border Cyber Hubs. Supporting activities for the SOCs that were already launched under the previous DIGITAL work programmes (2021-2022 and 2023-2024) 1 could also be included when relevant to ensure collaboration with the Cross-Border Cyber Hubs.
In addition to setting up processes, tools and services for prevention, detection and analysis of emerging cyberattacks, the scope also covers the acquisition and/or adoption of common (automation) tools, processes and shared data infrastructures for the management and sharing of contextualised and actionable cybersecurity operational information across the EU. Well-established open standards for CTI sharing (e.g. MISP Standard 2 ) or automation of advisory information (e.g. CSAF 3 ) and cybersecurity related messages (e.g. by IntelMQ) should be considered. Cross-Border Cyber Hubs could also foresee the possibility to monitor undersea infrastructure, such as submarine cables.
1 ENSOC and ATHENA consortia are already financed.
2 MISP Standard: https://www.misp-standard.org/.
3 Common Security Advisory Framework (CSAF): Machine-processable format enables automated database reconciliation - https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und Empfehlungen/Empfehlungen-nach-Angriffszielen/Industrielle-Steuerungs-und Automatisierungssysteme/CSAF/CSAF_node.html.
The Cross-Border Cyber Hubs platforms will contribute to enhancing and consolidating collective situational awareness and capabilities in detection and CTI, supporting the development of better performing data analytics, detection, and response tools, through the pooling of large amounts of data, including new data generated internally by the consortia members.
The platforms should act as a central point allowing for broader pooling of relevant data and CTI, enabling the dissemination of threat information on a large scale and among a large and diverse set of actors (e.g. CERTs/CSIRTs, ISACs, operators of critical infrastructures).
According to the Cyber Solidarity Act, the Cross-Border Cyber Hubs and the CSIRTs Network shall cooperate closely, in particular for the purpose of sharing information. To that end, they shall agree procedural arrangements on cooperation and sharing of relevant information and on the types of information to be shared.
Furthermore, Cross-Border Cyber Hubs could also deploy solutions for the surveillance and protection of critical undersea infrastructure, such as submarine cables, and the detection of malicious activities around them, to improve the resilience and security of this infrastructure, which is critical for global communications. The response to such hybrid threats could also include situational awareness performed through the collection and analysis of in-situ, sea based sensor data as well as relevant satellite imagery. For this activity, operational synergies with the EU Copernicus Space Programme and in particular with its Security Service are required.
Where the Cross-Border Cyber Hubs obtain information relating to a potential or ongoing large-scale cybersecurity incident, they shall ensure, for the purpose of common situational awareness, that relevant information as well as early warnings are provided to the authorities in the Member States and to the Commission through the EU-CyCLONe and the CSIRTs network61, without undue delay. A call for expression of interest will be launched to select entities in Member States that provide the necessary facilities to host and operate Cross-Border Cyber Hubs for pooling data on cybersecurity threats between several Member States. Applicants to the call for expressions of interest should describe the aims and objectives of the Cross-Border Cyber Hub, describe its role and how such role relates to other cybersecurity actors, and its potential cooperation with other public or private cybersecurity stakeholders. Applicants should also provide the detailed planning of the activities and tasks of the Cross-Border Cyber Hub, the services it will offer, the way they will operate and be operationalised, as well as the main milestones and deliverables. They should also specify what equipment, tools and services need to be procured and integrated to build up the Cross-Border Cyber Hub, its services and its infrastructure.
To support the above activities of a Cross-Border…
Artificial intelligence Capacity building Cyber-physical systems Cybersecurity Cybersecurity Domains Defence Real time data analytics TSI (Technical Specifications for Interoperability) Tag Cross-Border Cyber Hubs cyber threats detection information sharing preparedness and resilience of critical infrastructures response to cyber threats submarine cable security
Single-stage call. Next deadline 2027-03-16. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).
| Fact | Value | How we know | Taken from the source |
|---|---|---|---|
| Deadline | 16 March 2027 “Single-stage call. Next deadline 2027-03-16. The portal states the exact cut-off time (EU calls usually close at 17:00 Brussels time).” | official data field | 15 Nov 2026 |
| Amount per applicant | Unknown — not stated in the source we hold | unknown | — |
| Total budget | €2 million | official data field | 15 Nov 2026 |
| Funding rate | Unknown — not stated in the source we hold | unknown | — |
| Who can apply | Unknown — not stated in the source we hold | unknown | — |
| Where to apply | Read the topic conditions on the EU Funding & Tenders Portal for eligible countries, consortium requirements, budget and the application route. | read from the official text | 15 Nov 2026 |
Facts on this page come from the funder’s official data, taken on 14 Nov 2026. The funder's own documents, including later amendments, always take precedence.
The expected outcomes of this topic are : • Functional demonstrators of working AI chip prototypes (PCB-level) designed by EU fabless companies and physically integrated …
The expected outcomes of this topic are : • A common EU evaluation platform for AI chips and racks, with transparent KPIs, workloads and benchmark reports used for Chips …
Projects are expected to contribute to the following expected outcomes: • Advanced heterogeneous integration, particularly in 2.5D and 3D packaging and integrated photoni…
The types of deliverables are presented in two parts. The first part covers: • Enhanced cooperation, preparedness and cybersecurity resilience in the EU; preparedness sup…
• Deployment of Artificial Intelligence and various AI-powered technologies as enablers for Cyber Hubs, CSIRTs, NCSCs, NIS SPOCs and others. • Novel cybersecurity tools b…