Eligibility

Can I apply to ECCC: Cybersecurity Funding?

ECCC: Cybersecurity Funding is open to startups, SMEs, mid-caps or large companys in the EU, Norway, Iceland and Liechtenstein, applying alone or in a consortium, at TRL 5 to 9.

By country

  • Can a company from an EU country apply?Yes
  • Can a company from Poland (a Widening country) apply?Yes
  • Can a company from the UK apply?NoOrganisations in the United Kingdom can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Switzerland apply?NoOrganisations in Switzerland can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Norway apply?Yes
  • Can a company from Israel apply?NoOrganisations in Israel can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Ukraine apply?NoOrganisations in Ukraine can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Türkiye apply?NoOrganisations in Türkiye can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Canada apply?NoOrganisations in Canada can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from Japan apply?NoOrganisations in Japan can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from South Korea apply?NoOrganisations in South Korea can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from the United States apply?NoOrganisations in the United States can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.
  • Can a company from India apply?NoOrganisations in India can't apply: it is open to the EU, Norway, Iceland and Liechtenstein.

By organisation

  • Can a founder without a company yet apply?Yes, ifRegister a company first: the applicant must be an incorporated SME.
  • Can a startup apply?Yes
  • Can an established SME apply?Yes
  • Can a mid-cap company apply?Yes
  • Can a large company apply?Yes
  • Can a university apply?Yes
  • Can a research organisation apply?Yes
  • Can a company apply on its own, without partners?Yes

By stage

  • Can I apply with an idea or early research?NoToo early: this starts at TRL 5 (a prototype tested outside the lab).
  • Can I apply with a proof of concept?NoToo early: this starts at TRL 5 (a prototype tested outside the lab).
  • Can I apply with a prototype?Yes
  • Can I apply with a pilot with real users?Yes
  • Can I apply with a product on the market?Yes

The rules in full

Where you must be based
the EU, Norway, Iceland and Liechtenstein

Digital Europe cybersecurity calls are limited to the EU and Norway, Iceland and Liechtenstein. Other Digital Europe associated countries are not eligible.

Who can apply
a startup, an SME, a mid-cap, a large company, a university, a research organisation, a public body or a non-profit

Companies, research bodies and public bodies. Some topics target only national authorities, CSIRTs or National Coordination Centres.

Who can join as a partner
a startup, an SME, a mid-cap, a large company, a university, a research organisation, a public body or a non-profit

Partners, subcontractors and cascade-funding recipients must also be established in and controlled from the EU or EEA. Work must take place there.

Alone or with partners
Alone, or as a consortium

Six of the seven topics in the current call have no minimum consortium, so one company can apply alone. The Regional Cable Hubs topic needs 2 independent applicants from 2 countries, including public authorities from 2 Member States. Horizon Europe cybersecurity research topics use the usual 3 entities from 3 countries.

Stage
TRL 5 to 9

Digital Europe deployment topics fund solutions ready to deploy and validate. Earlier-stage research goes through Horizon Europe cybersecurity topics.

Also required
EU-controlled
What you get
grants, up to €5M

Expected EU contribution per project in call DIGITAL-ECCC-2027-DEPLOY-CYBER-11: EUR 3M to 5M for the AI security, SME, legislation and dual-use topics; EUR 1.5M to 3M for authority and coordination-centre topics.

Funding rate
Most topics pay 50% of eligible costs. The SME topic (AI4SME) pays 75% to SMEs and 50% to others. Regional Cable Hubs pays 70%.

Conditions to check

  • Current call DIGITAL-ECCC-2027-DEPLOY-CYBER-11 (EUR 96M) closes on 14 January 2027 at 17:00 CET.
  • Every participant files an ownership and control declaration. The grant may restrict where results and IP can go.
  • Smaller teams can apply for cascade funding run by National Coordination Centres and funded projects, up to EUR 100,000 per recipient.

Where applicants trip up

  • A non-EU/EEA shareholder with control (for example a US or UK parent or controlling investor) makes you ineligible, even if you are incorporated in the EU.
  • A partner or subcontractor that is controlled from outside the EU/EEA can sink the whole proposal.
  • You must fund 50% of the project yourself on most topics. Many start-ups underestimate this.

Checked against these official sources on 18 October 2026. Each call can add its own conditions, so confirm in the call document before you apply.

Europe’s tech funding.
One place.

The weekly briefing

Funding calls, VC news and key deadlines — a weekly briefing for European founders.

Free · unsubscribe anytime