SECURE is: a grant of up to €30,000 to increase the cyber resilience of small and medium-sized businesses

The SECURE PROJECT, funded under the Digital Europe, launches an open call aimed at strengthening the cyber resilience of European SMEs.

Support is provided for specific activities related to compliance with the requirements of the Cyber Resilience Act (CRA). This act establishes mandatory requirements for cybersecurity of software, equipment and other products with digital elements that are supplied to the EU market.

The proposed activities should be related to products, processes, technologies, infrastructure or services that are or may be subject to CRA requirements.

Funds can be directed to

• conducting a cybersecurity audit and analysis of compliance with CRA requirements;
• assessment of vulnerabilities and penetration testing;
• security analysis of program code and applications;
• implementation of the principles of safe product development;
• improving vulnerability and cyber risk management procedures;
• development of internal policies, technical documentation and cybersecurity procedures;
• modernization of digital, informational, IT and operational-technological infrastructure;
• acquisition, adaptation and integration of available cyber defense tools;
• involvement of external specialists and specialized suppliers;
• training of employees to work with cybersecurity tools, if such training is directly related to the implementation of CRA requirements.

Focus on digital skills

The grant can cover the training of cybersecurity, IT, quality management and legal support teams for the use of specialized digital tools. The training should be part of the enterprise's project to increase cyber resilience and ensure compliance with CRA requirements.

The financial conditions

The maximum grant amount for one enterprise is €30,000. Financing is provided on the terms of 50% co-financing.

Funding is provided in the form of a grant with a fixed amount. Eligible costs may include:

• payment for the work of the project team;
• services of external contractors;
• lease or depreciation of equipment;
• purchase of necessary goods and services;
• indirect costs of up to 7% of direct costs.

The project must be implemented within a maximum of 180 calendar days after signing the grant agreement. The costs incurred prior to its signing are not financed.

Who can apply

The application may be submitted by a separate micro, small or medium-sized enterprise of the private sector, which:

• has the status of a legal entity;
• has fewer than 250 employees;
• has an annual turnover of not more than €50 million or a total balance of not more than €43 million;
• registered in a Member State of the European Union or the European Economic Area;
• develops, manufactures, imports or distributes products with digital elements;
• can confirm that the proposed project is aimed at meeting the requirements of the CRA.

The application is submitted by one enterprise. There is no need to create a consortium. Government agencies, authorities and universities may not be applicants.

How applications will be evaluated

Project proposals will be evaluated according to three main criteria:

1. Quality and compliance: communication’ of the project with the requirements of CRA, validity of goals, methodology and ability of the enterprise to implement the planned activities.
2. The expected impact: practical results for the enterprise, clarity of description and availability of indicators for evaluating progress.
3. The implementation of: realism of the plan, reasonable budget, quality of work packages, results and calendar plan.

Submission of an application

The application and main documents are submitted in English through the SECURE platform. Official documents issued by public authorities may be submitted in the original language.

To participate, you must:

1. register on the SECURE platform;
2. provide documents about the company and its ownership structure;
3. fill in the project proposal and budget;
4. describe the ’ connection of the project with the CRA requirements;
5. determine the results, performance indicators, risks and implementation calendar;
6. apply by December 11, 2026.