Official call identifier: DIGITAL-ECCC-2027-DEPLOY-CYBER-11-AI4SME
Objective of the call
This call aims to support the market uptake and dissemination of innovative AI-powered cybersecurity solutions for European SMEs and to improve knowledge, auditing and cyber risk preparedness.
SMEs often lack the financial and organisational capacity to assess cyber risks, implement cybersecurity strategies and deploy advanced tools. The action seeks to increase their cyber resilience, strengthen risk management maturity and foster a technologically advanced cybersecurity culture across the EU.
Scope of activities
Projects must develop and deploy AI-powered products, tools and services tailored to SMEs, enabling improved detection of attack patterns and automation of core cybersecurity processes.
Proposals must cover both the development or adaptation of software and/or hardware and the validation of the proposed solutions.
The action foresees the creation of a SaaS-based cybersecurity toolkit tailored to SME needs. The toolkit should provide user-friendly tools for:
- Risk assessment and risk management
- Threat detection and vulnerability alerts
- Incident response and notification
- Cyber-incident prediction and response functions
- Protection of personal data and improvement of cyber hygiene
Activities should include at least one of the following:
- Uptake and adoption of AI-powered cybersecurity tools in organisations where such solutions are not yet deployed
- Development of user-friendly AI-based toolkits automating key cybersecurity processes in SMEs, including:
- Automated risk assessment and mitigation recommendations
- Interfaces to existing tools supporting cyber risk analysis through infrastructure scanning and authorised user data
- Alert functions on relevant vulnerabilities and threats
- Connection to Cyber Hubs for incident reporting and recovery support
- SME user interfaces for AI-assisted incident reporting, including instructions on how to react and access support
Solutions must rely on trustworthy and cybersecure AI, ensuring robustness, human oversight and resilience, in line with EU regulatory requirements such as the AI Act.
Projects are also expected to integrate AI technologies into cybersecurity processes and contribute to improving employee training in the use of AI-enabled cybersecurity tools.
Expected Deliverables:
• Support the adoption of market-ready innovative AI-powered cybersecurity solutions, including solutions developed in the framework of EU-supported research and innovation projects.
• Provide and deploy up to date AI-powered tools and services to organisations (in particular SMEs) to prepare, protect and respond to cybersecurity threats.
• Integrate AI technologies into cybersecurity processes to improve the security of ICT solutions, including providing innovative approaches to training employees to use AI solutions for cybersecurity.
• Deployment of cybersecure tools and technologies relying on trustworthy AI; AI driven cybersecurity tools; Integration of tools to protect and secure AI solutions.
Eligible applicants
- SMEs and start-ups developing cybersecurity or AI-powered solutions
- Research organisations and universities
- Public sector entities and organisations falling under the NIS 2 Directive
- Industry actors and technology providers, including providers of AI-assisted functionalities
- Cybersecurity service providers and Cyber Hubs
- Applicants must be legal entities established in an EU Member State or an EEA country: Norway, Iceland or Liechtenstein.
Due to the security restrictions under Article 12(5) of the Digital Europe Programme Regulation, participating entities must not be directly or indirectly controlled from a country outside the eligible countries. These restrictions apply to beneficiaries, affiliated entities, associated partners, subcontractors and recipients of financial support to third parties. Project activities must also take place in eligible countries.
Eligible costs
Eligible costs may include:
- Development and adaptation of AI-powered cybersecurity software and hardware
- Deployment and validation of SaaS cybersecurity toolkits for SMEs
- Integration of trustworthy AI functionalities
- Testing and validation activities
- Training and awareness-raising activities for SME staff
- Activities supporting incident reporting and recovery processes
- Coordination and collaboration with Cyber Hubs
Funding conditions
Type of action:
SME support action
Funding rate:
50% funding rate; 75% for SMEs.
EU indicative budget:
Around EUR 20,000,000
Expected EU contribution:
€3–5 million per project
Project duration:
Typically 36 months
Deadline for submission
14 January 2027