Cybersecure tools, technologies and services relying on AI

What is this call about?

The topic funds the development and deployment of AI-based cybersecurity tools for Cyber Hubs, CSIRTs and national authorities, covering threat detection, threat intelligence, incident response and the security of AI itself.

What does this call fund?

Scope

The topic supports the development and deployment of AI-based cybersecurity systems and tools, including generative AI, for national and cross-border Cyber Hubs, CSIRTs, national cybersecurity centres, NIS single points of contact and other authorities. Solutions should address threat and vulnerability detection, threat mitigation, self-healing recovery from incidents, data analysis and data sharing, should themselves be secure, and must comply with intellectual property rules and the GDPR.

Eligible activities

Activities should include at least one of the following:

• continuous detection of patterns and anomalies that may indicate emerging threats, including in ICT and operational technology;
• creation of cyber threat intelligence (CTI) based on new detection capabilities, and secure sharing of CTI through anonymisation;
• faster incident response through real-time network monitoring and automated alerts or responses;
• malware mitigation, vulnerability identification, automated vulnerability scanning and penetration testing;
• protection of business-sensitive data by analysing access patterns, and secure solutions where AI, IoT and smart grids meet;
• tools for product security by design in line with the Cyber Resilience Act, tools to secure AI solutions, and contributions to certification of AI-driven cybersecurity systems.

Expected outcomes

• New AI-based cybersecurity tools tested and validated in relevant conditions and made available to Cyber Hubs, CSIRTs and other authorities.
• Better information sharing among these bodies, supported by AI-produced CTI, and original European CTI feeds or services.
• Secure, trustworthy AI solutions complying with EU law, and contributions to standardisation and certification.

Use of results

Systems, tools and services developed will be made available for licensing to Cyber Hub platforms, CSIRTs and competent authorities under favourable market conditions. Links with high-performance computing stakeholders are encouraged where appropriate.

When is the deadline?

14 January 2027 (70 days)