As cyber threats grow more sophisticated and European cybersecurity regulations become increasingly demanding, businesses face a new challenge: how to strengthen their digital resilience without carrying the entire financial burden themselves. The good news? The European Union is investing in solutions, and new funding opportunities are on the horizon.
We spoke with Matej Tisaj, Head of EU Programmes at Tiko Pro, about the growing importance of EU funding for cybersecurity, the opportunities available through Horizon Europe and Digital Europe, and what businesses should know before joining an EU-funded project. Following his presentation at Cyber Day 2026 in Ljubljana this October, Matej shares insights into the upcoming calls for 2027 and explains why now is the right time for organisations to explore their role in Europe's cybersecurity ecosystem.
Matej, cybersecurity has become one of Europe's major priorities. Why is the EU investing so heavily in this area?
Cybersecurity is no longer a challenge that individual organisations or countries can address entirely on their own. Cyber threats do not respect national borders. An attack targeting a single supplier can affect businesses, customers and critical infrastructure across several European countries. At the same time, the nature of these threats is changing rapidly, particularly with the growing use of artificial intelligence in cyberattacks. The EU is responding on several levels. Regulations such as the NIS2 Directive, the Cyber Resilience Act (CRA) and the Cyber Solidarity Act are strengthening cybersecurity requirements across Europe. However, meeting these requirements often demands significant investments in technology, expertise and organisational capabilities.
This is where EU funding plays an important role. Rather than leaving organisations to address these challenges individually, the EU supports collaborative projects that develop, test and implement solutions benefiting the wider European cybersecurity ecosystem. For businesses, this creates an opportunity to turn regulatory challenges into innovation and growth.
What funding opportunities are currently available for organisations working in cybersecurity?
Two of the most relevant programmes are Horizon Europe and Digital Europe. Although both support cybersecurity, they focus on different stages of technological development and implementation. Horizon Europe primarily supports research and innovation. Its cybersecurity priorities include developing secure software and hardware, strengthening artificial intelligence applications, advancing encryption technologies and preparing for future threats such as quantum computing. These projects often bring together research institutions, technology developers, SMEs and industry partners to develop and validate innovative solutions.
Digital Europe, on the other hand, focuses more on bringing technologies into practical use. It supports the deployment and scaling of cybersecurity solutions, the adoption of advanced security technologies by businesses, and the protection of critical infrastructure.
A simple way to understand the difference is that Horizon Europe helps develop and demonstrate innovative solutions, while Digital Europe supports their wider implementation and adoption.
Both programmes offer valuable opportunities, but choosing the right one depends on the maturity of the proposed solution and the organisation's objectives.
Looking ahead to 2027, which funding opportunities should businesses pay particular attention to?
There are several important opportunities approaching, and I would particularly highlight the calls under Digital Europe, which are already open. The current cybersecurity call package has a deadline of 14 January 2027, with funding available across seven topics. Three areas are especially relevant for businesses.
The first focuses on implementing European cybersecurity legislation, including the CRA, NIS2 and DORA. With €20 million allocated to this topic, it offers opportunities to develop solutions that help organisations meet increasingly demanding regulatory requirements.
The second area addresses cybersecurity solutions for SMEs, particularly secure AI-powered technologies. Another €20 million is allocated to supporting cybersecurity capabilities among smaller businesses.
The third area focuses on cybersecurity technologies with both civilian and defence applications, with €10 million available.
Other topics include AI-powered cybersecurity tools, coordinated preparedness testing, strengthening National Coordination Centres and improving the security of undersea cables.
Looking further ahead, Horizon Europe will introduce another important set of opportunities. Its 2027 cybersecurity call is scheduled to open on 2 March 2027, with a deadline of 15 September 2027. The call will focus on artificial intelligence for cybersecurity, secure computing across connected technologies, post-quantum cryptography and next-generation communication security.
For organisations developing innovative technologies, these calls represent an opportunity to bring their expertise into European research and innovation projects.
Many companies assume EU-funded projects are primarily intended for universities, research institutions or large corporations. Is that really the case?
Not at all. One of the most important messages I want to communicate is that SMEs can be valuable partners in European projects. A successful consortium needs different types of expertise. Research institutions contribute scientific knowledge, technology providers develop solutions, public authorities bring regulatory perspectives, and industry partners help test technologies in real-world environments. For example, a company operating critical infrastructure might participate as an end user, testing a new cybersecurity solution in its operational environment. A technology SME might contribute a specialised tool or develop a new component. Another organisation might provide expertise in testing, certification, training or market adoption.
Not every partner needs to coordinate a project or develop groundbreaking technology. What matters is understanding where your organisation can contribute and how that contribution supports the project's objectives. In many cases, practical industry knowledge and access to real operational environments are just as important as technological expertise.
What should a company do if it is interested in participating in one of these projects but does not know where to start?
I would recommend starting with three steps. First, identify the right funding opportunity. Look at the objectives of the available calls and consider how your organisation's expertise, technology or business needs align with them.
Second, define your potential role. You might be a technology provider, an end user, a pilot site or a work package leader. Having a clear understanding of what you can contribute makes it easier to identify suitable partnerships.
Third, start building connections early. This is probably the most important advice.
European projects are developed through international consortia, and partners are often selected well before the official submission deadline. Waiting until the final weeks of an open call can mean missing valuable opportunities. Companies do not necessarily need a fully developed project idea before reaching out. Sometimes, having a specific capability, challenge or innovative solution is enough to start a conversation with potential partners. The key is to be proactive rather than waiting for the perfect opportunity to appear.
Finally, what would be your main advice to businesses considering EU funding for cybersecurity in 2027?
I would encourage businesses to look beyond funding itself. Participating in an EU project is not only about receiving financial support. It is also an opportunity to collaborate with international experts, access new technologies, strengthen internal capabilities and establish partnerships that can lead to further innovation and business development.
Cybersecurity will remain a strategic priority for Europe, and the upcoming funding opportunities reflect that commitment.
For organisations already developing cybersecurity technologies, looking to improve their resilience or seeking international collaboration, this is an excellent time to explore what is possible. My advice is simple: identify where you can contribute, connect with the right partners and start preparing early. The next European cybersecurity project could be an opportunity for your organisation.
Turning European Funding Opportunities into Real Projects
Our conversation with Matej highlights an important message: strengthening Europe's cybersecurity requires more than regulation and technological innovation. It also depends on collaboration between organisations willing to contribute their expertise, develop solutions and bring them into practical use. With new funding opportunities approaching in 2027, businesses have a chance to become part of this transformation.
At Tiko Pro, we help organisations navigate the EU funding landscape, identify relevant opportunities, build international partnerships and develop competitive project proposals. Whether your organisation is exploring EU funding for the first time or looking to expand its involvement in European projects, the right preparation and partnerships can turn emerging opportunities into successful projects.
Interested in exploring your role in an upcoming EU-funded cybersecurity project? Get in touch with the Tiko Pro team and discover where your expertise could make a difference.