Filter Search for grants
Call Navigation
Call key data
Generative AI for Cybersecurity applications
Funding Program
Horizon Europe: Cluster 3 - Civil security for society
Call number
HORIZON-CL3-2025-02-CS-ECCC-01
deadlines
Opening
12.06.2025
Deadline
12.11.2025 17:00
Funding rate
100%
Call budget
€ 40,000,000.00
Estimated EU contribution per project
between € 12,000,000.00 and € 14,000,000.00
Link to the call
Link to the submission
Call content
short description
The use of Artificial intelligence is becoming indispensable with applications where massive data is involved. Understanding all implications for cybersecurity requires deeper analysis and further research and innovation.
Call objectives
Generative AI presents both opportunities and challenges in the field of cybersecurity. This topic supports the research on new opportunities brought by Generative AI for Cybersecurity applications, to develop, train and test AI models to scale up detection of threats and vulnerabilities, enhance response time, cope with the large quantities of data involved, and automate process and decision-making support; for example by generating reports from threat intelligence data, suggesting and writing detection rules, threat hunts, and queries for the Security information and event management (SIEM), creating management, audit and compliance reports and reverse engineering malware.
Proposals addressing expected outcome 1 (see below)
- Advanced threat and anomaly detection and analysis: Current cybersecurity tools may struggle to keep pace with the evolving tactics of cyber attackers. Developing, training and testing of Generative AI models can be used to analyse large volumes of data and accurately identify anomalies and deviations from normal patterns of behaviour, enabling more effective threat detection, analysis and response.
Tools should also support cybersecurity professionals as they may struggle to detect and respond to threats posed by generative AI, particularly as these systems become more sophisticated and difficult to distinguish from genuine human activity. - Adaptive security measures: Cybersecurity tools often rely on static rules and signatures to detect threats, making them less effective against new and evolving attack methods. In addition, many cybersecurity tools still rely on manual intervention for threat response, which can be time-consuming and ineffective. Generative AI, through development, training, finetuning and testing of Generative AI models can support these tools to adapt and respond to emerging threats in real-time, improving overall security posture.
- Enhanced authentication and access control: The use of AI technologies could improve resilience of authentication and access control systems to unauthorized access and credential theft, making it more difficult for unauthorized users to gain access to sensitive information or systems.
Proposals addressing expected outcome 2 (see below)
- Development of tools powered by Generative AI that analyse and facilitate the Application of the national and EU regulation in digital systems, in particular the Artificial Intelligence Act, the Directive on measures for a high common level of cybersecurity across the Union (NIS2) and the Cyber Resilience Act.
- Adaptation to a dynamic environment. Companies, public sector and organisations face an ever-changing environment which makes keeping up with compliance towards cybersecurity rules challenging. On one hand there’s a variety of rules applicable at sectorial, national or European level to be considered. On the other, change management and updates in ICT systems in organisations is frequent. Addressing both facets with tools powered with Generative AI brings the potential for a compliance continuum within organisations otherwise limited in time when driven by human intervention only.
read more
Expected effects and impacts
All proposals are expected to respect Trustworthy and Responsible AI principles and data privacy.
All proposals should demonstrate the EU added value by fostering the development of EU technology, the use of open-source technologies when technically and economically feasible, the exploitation of available EU data (Data Spaces, EOSC, federated data etc)
Proposals should define key performance indicators (KPI), with baseline targets to measure progress and to demonstrate how the proposed work will bring significant advancement to the state-of-the-art. All technologies and tools developed should be appropriately documented, to support take-up and replicability. Participation of SMEs is encouraged.
Proposals are expected to pay special attention to the Intellectual Property dimension of the results. The usability of the outcomes and results once the project is finished will be closely assessed.
read more
Expected results
Projects will develop technologies, tools, processes that reinforce cybersecurity using AI technological components, in particular Generative AI, in line with relevant EU policy, legal and ethical requirements.
Proposals should address at least one of the following expected outcomes:
- Developing, training and testing of Generative AI models for monitoring, detection, response and self-healing capabilities in digital processes, and systems against cyberattacks, including adversarial AI attacks.
- Development of Generative AI tools and technologies for continuous monitoring, compliance and automated remediation. These should consider legal aspects of EU and national regulation as well as ethical and privacy aspects.
Eligibility Criteria
Regions / countries for funding
Moldova (Moldova), Albania (Shqipëria), Armenia (Հայաստան), Bosnia and Herzegovina (Bosna i Hercegovina / Босна и Херцеговина), Canada, Faeroes (Føroyar / Færøerne), Georgia (საქართველო), Iceland (Ísland), Israel (ישראל / إِسْرَائِيل), Kosovo (Kosova/Kosovë / Косово), Montenegro (Црна Гора), Morocco (المغرب), New Zealand (Aotearoa), North Macedonia (Северна Македонија), Norway (Norge), Serbia (Srbija/Сpбија), Switzerland (Schweiz/Suisse/Svizzera), Tunisia (تونس /Tūnis), Türkiye, Ukraine (Україна), United Kingdom
eligible entities
EU Body, Education and training institution, Non-Profit Organisation (NPO) / Non-Governmental Organisation (NGO), Other, Private institution, incl. private company (private for profit), Public Body (national, regional and local; incl. EGTCs), Research Institution incl. University, Small and medium-sized enterprise (SME)
Mandatory partnership
Yes
Project Partnership
To be eligible for funding, applicants must be established in one of the following countries:
- the Member States of the European Union, including their outermost regions
- the Overseas Countries and Territories (OCTs) linked to the Member States
- countries associated to Horizon Europe - see list of particpating countries
Only legal entities forming a consortium are eligible to participate in actions provided that the consortium includes, as beneficiaries, three legal entities independent from each other and each established in a different country as follows:
- at least one independent legal entity established in a Member State; and
- at least two other independent legal entities, each established in different Member States or Associated Countries.
Any legal entity, regardless of its place of establishment, including legal entities from non-associated third countries or international organisations (including international European research organisations) is eligible to participate (whether it is eligible for funding or not), provided that the conditions laid down in the Horizon Europe Regulation have been met, along with any other conditions laid down in the specific call topic.
A ‘legal entity’ means any natural or legal person created and recognised as such under national law, EU law or international law, which has legal personality and which may, acting in its own name, exercise rights and be subject to obligations, or an entity without legal personality.
Specific cases:
- Affiliated entities (i.e. entities with a legal or capital link to a beneficiary which participate in the action with similar rights and obligations to the beneficiaries, but which do not sign the grant agreement and therefore do not become beneficiaries themselves) are allowed, if they are eligible for participation and funding.
- Associated partners (i.e. entities which participate in the action without signing the grant agreement, and without the right to charge costs or claim contributions) are allowed, subject to any conditions regarding associated partners set out in the specific call conditions.
- Entities which do not have legal personality under their national law may exceptionally participate, provided that their representatives have the capacity to undertake legal obligations on their behalf, and offer guarantees to protect the EU’s financial interests equivalent to those offered by legal persons.
- Legal entities created under EU law (EU bodies) including decentralised agencies may be part of the consortium, unless provided for otherwise in their basic act.
- International European research organisations are eligible to receive funding. International organisations with headquarters in a Member State or Associated Country are eligible to receive funding for ‘Training and mobility’ actions or when provided for in the specific call/topic conditions. Other international organisations are not eligible to receive funding, unless provided for in the specific call/topic conditions, or if their participation is considered essential for implementing the action by the granting authority.
- Joint Research Centre (JRC)— Where provided for in the specific call conditions, applicants may include in their proposals the possible contribution of the JRC but the JRC will not participate in the preparation and submission of the proposal. Applicants will indicate the contribution that the JRC could bring to the project based on the scope of the topic text. After the evaluation process, the JRC and the consortium selected for funding may come to an agreement on the specific terms of the participation of the JRC. If an agreement is found, the JRC may accede to the grant agreement as beneficiary requesting zero funding or participate as an associated partner, and would accede to the consortium as a member.
- Associations and interest groupings — Entities composed of members (e.g. European research infrastructure consortia (ERICs)) may participate as ‘sole beneficiaries’ or ‘beneficiaries without legal personality’. However, if the action is in practice implemented by the individual members, those members should also participate (either as beneficiaries or as affiliated entities, otherwise their costs will NOT be eligible.
- EU restrictive measures — Entities subject to EU restrictive measures under Article 29 of the Treaty on the European Union (TEU) and Article 215 of the Treaty on the Functioning of the EU (TFEU) as well as Article 75 TFEU, are not eligible to participate in any capacity, including as beneficiaries, affiliated entities, associated partners, third parties giving in-kind contributions, subcontractors or recipients of financial support to third parties (if any).
- Legal entities established in Russia, Belarus, or in non-government controlled territories of Ukraine — Given the illegal invasion of Ukraine by Russia and the involvement of Belarus, there is currently no appropriate context allowing the implementation of the actions foreseen in this programme with legal entities established in Russia, Belarus, or in non-government controlled territories of Ukraine. Therefore, even where such entities are not subject to EU restrictive measures, such legal entities are not eligible to participate in any capacity. This includes participation as beneficiaries, affiliated entities, associated partners, third parties giving in-kind contributions, subcontractors or recipients of financial support to third parties (if any). Exceptions may be granted on a case-by-case basis for justified reasons.
With specific regard to measures addressed to Russia, following the adoption of the Council Regulation (EU) 2024/1745 of 24 June 2024 (amending Council Regulation (EU) No 833/2014 of 31 July 2014) concerning restrictive measures in view of Russia’s actions destabilising the situation in Ukraine, legal entities established outside Russia but whose proprietary rights are directly or indirectly owned for more than 50% by a legal person, entity or body established in Russia are also not eligible to participate in any capacity. - Measures for the protection of the Union budget against breaches of the principles of the rule of law in Hungary — Following the Council Implementing Decision (EU) 2022/2506, as of 16 December 2022, no legal commitments can be entered into with Hungarian public interest trusts established under the Hungarian Act IX of 2021 or any entity they maintain. Affected entities may continue to apply to calls for proposals and can participate without receiving EU funding, as associated partners, if allowed by the call conditions. However, as long as the Council measures are not lifted, such entities are not eligible to participate in any funded role (beneficiaries, affiliated entities, subcontractors, recipients of financial support to third parties, etc.).In case of multi-beneficiary grant calls, applicants will be invited to remove or replace that entity in any funded role and/or to change its status into associated partner. Tasks and budget may be redistributed accordingly.
other eligibility criteria
In order to achieve the expected outcomes, and safeguard the Union’s strategic assets, interests, autonomy, and security, participation in this topic is limited to legal entities established in Member States and Associated Countries.
In order to guarantee the protection of the strategic interests of the Union and its Member States, entities established in an eligible country listed above, but which are directly or indirectly controlled by a non-eligible country or by a non-eligible country entity, shall not participate in the action.
Additional information
Topics
Relevance for EU Macro-Region
EUSAIR - EU Strategy for the Adriatic and Ionian Region, EUSALP - EU Strategy for the Alpine Space, EUSBSR - EU Strategy for the Baltic Sea Region, EUSDR - EU Strategy for the Danube Region
UN Sustainable Development Goals (UN-SDGs)
Additional Information
Applications must be submitted electronically via the Funders & Tenders Portal electronic submission system (accessible via the topic page in the Search Funding & Tenders section). Paper submissions are NOT possible.
Applications must be submitted using the forms provided inside the electronic submission system (not the templates available on the topic page, which are only for information). The structure and presentation must correspond to the instructions given in the forms.
Applications must be complete and contain all parts and mandatory annexes and supporting documents.
The application form will have two parts:
- Part A (to be filled in directly online) contains administrative information about the applicant organisations (future coordinator and beneficiaries and affiliated entities), the summarised budget for the proposal and call-specific questions;
- Part B (to be downloaded from the Portal submission system, completed and then assembled and re-uploaded as a PDF in the system) contains the technical description of the project.
Annexes and supporting documents will be directly available in the submission system and must be uploaded as PDF files (or other formats allowed by the system).
The limit for a full application (Part B) is 45 pages.
To ensure a balanced portfolio covering a broad range of research areas, grants will be awarded to applications not only in order of ranking but at least also to the two highest ranked proposal addressing expected outcome 1) and the highest ranked proposal addressing expected outcome 2), provided that the applications attain all thresholds.
Some activities resulting from this topic may involve using classified background and/or producing of security sensitive results (EUCI and SEN). Please refer to the related provisions in section B Security — EU classified and sensitive information of the General Annexes.
Call documents
Horizon Europe Work Programme 2025 Cluster 3 - Civil Security for SocietyHorizon Europe Work Programme 2025 Cluster 3 - Civil Security for Society(974kB)
Contact
Website
European Cybersecurity Competence Centre and Network (ECCC) - National Coordination Centres
applicants@eccc.europa.eu
Website
To see more information about this call, you can register for free here
or log in with an existing account.
Log in
Register now