Loading…
Strategic Analysis
A winning proposal must position AI not merely as an automated classifier, but as an adaptive, trustworthy, and explainable defence layer integrated seamlessly into next-generation Security Operation Centres (SOCs) and European Cyber Hubs. Proposals must bridge cutting-edge machine learning resilience against adversarial evasion with operational workflows, ensuring strict adherence to the EU AI Act and strict Union autonomy restrictions under non-EU ownership control rules.
TRL 2 → 6
Based on programme defaults
Develop AI-driven solutions and tools for real-time cyber threat detection. Investigating novel machine learning techniques to detect anomalies, malicious activity, and AI-powered cyber threats in real time, improving situational awareness and response times.
Develop adaptive AI systems capable of evolving with dynamic cybersecurity challenges. Exploring AI techniques that continuously learn from new cyber threats, adapting to emerging attack patterns, while maintaining robustness and explainability.
Support the future enhancements of Security Operation Centres/Cyber Hubs. Developing AI-enhanced SOC frameworks that integrate predictive analytics, automation, and threat intelligence to strengthen proactive defence measures.
AI-driven solutions for real-time cyber threat detection;
Advanced adaptive AI systems that evolve with dynamic cybersecurity challenges;
Contribute to drastically reduce reaction time for the recovery of systems.
No expected impacts identified for this destination.
AI Act
highThe AI Act establishes a regulatory framework for AI systems, categorising them by risk and setting requirements for transparency, safety, and accountability, particularly for high-risk applications like healthcare.
Evaluators will prioritise proposals that conduct thorough risk assessments of existing AI models under the AI Act and outline how the AGI roadmap ensures compliance with its provisions.
Specific requirements
EU space data infrastructures
If the project uses satellite-based Earth observation, positioning, navigation or timing data/services, beneficiaries must use Copernicus and/or Galileo/EGNOS. Other sources may be added but not substitute EU infrastructures.
Civil applications only
Horizon Europe funds exclusively civil applications. Research with exclusive military or dual-use application is excluded.
Gender Equality Plan
Having a Gender Equality Plan (GEP) is an eligibility criterion for public bodies, research organisations, and higher education institutions from Member States and Associated Countries.
Open Science
Mandatory open access to peer-reviewed scientific publications and responsible management of research data (FAIR principles, DMP required).
Geographic limitation to Member States and Associated Countries
Participation in this topic is limited to legal entities established in Member States and Associated Countries.
Exclusion of entities controlled by non-eligible countries
Entities established in an eligible country, but directly or indirectly controlled by a non-eligible country or by a non-eligible country entity, shall not participate in the action.
">
described in Annex A and Annex E of the Horizon Europe Work Programme General Annexes.
Proposal page limits and layout: described in Part B of the Application Form available in the Submission System.
described in Annex B of the Work Programme General Annexes.
A number of non-EU/non-Associated Countries that are not automatically eligible for funding have made specific provisions for making funding available for their participants in Horizon Europe projects. See the information in the Horizon Europe Programme Guide.
In order to achieve the expected outcomes, and safeguard the Union’s strategic assets, interests, autonomy, and security, participation in this topic is limited to legal entities established in Member States and Associated Countries. In order to guarantee the protection of the strategic interests of the Union and its Member States, entities established in an eligible country listed above, but which are directly or indirectly controlled by a non-eligible country or by a non-eligible country entity, shall not participate in the action.
described in Annex B of the Work Programme General Annexes.
described in Annex C of the Work Programme General Annexes.
are described in Annex D of the Work Programme General Annexes.
are described in Annex F of the Work Programme General Annexes and the Online Manual.
described in Annex F of the Work Programme General Annexes.
Eligible costs will take the form of a lump sum as defined in the Decision of 7 July 2021 authorising the use of lump sum contributions under the Horizon Europe Programme – the Framework Programme for Research and Innovation (2021-2027) – and in actions under the Research and Training Programme of the European Atomic Energy Community (2021-2025) [[This decision is available on the Funding and Tenders Portal, in the reference documents section for Horizon Europe, under ‘Simplified costs decisions’ or through this link: https://ec.europa.eu/info/funding-tenders/opportunities/docs/2021-2027/horizon/guidance/ls-decision_he_en.pdf]].
described in Annex G of the Work Programme General Annexes.
described in the [specific topic of the Work Programme]
Some activities resulting from this topic may involve using classified background and/or producing of security sensitive results (EUCI and SEN). Please refer to the related provisions in section B Security — EU classified and sensitive information of the General Annexes.
Application form templates — the application form specific to this call is available in the Submission System
Standard application form (HE RIA, IA)
Evaluation form templates — will be used with the necessary adaptations
Standard evaluation form (HE RIA, IA)
Guidance
Model Grant Agreements (MGA)
Call-specific instructions
Guidance: "Lump sums - what do I need to know?"
Information on Security issues (Security section)
HE Main Work Programme 2026-2027 – 1. General Introduction
HE Main Work Programme 2026-2027 – 6. Civil Security for Society
HE Main Work Programme 2026-2027 – 15. General Annexes
HE Framework Programme 2021/695
HE Specific Programme Decision 2021/764
EU Financial Regulation 2024/2509
Decision authorising the use of lump sum contributions under the Horizon Europe Programme
Rules for Legal Entity Validation, LEAR Appointment and Financial Capacity Assessment
EU Grants AGA — Annotated Model Grant Agreement
Funding & Tenders Portal Online Manual
Evaluators under ECCC / Cluster 3 will prioritize proposals that demonstrate real-time operational effectiveness in realistic SOC environments rather than isolated academic algorithms. They will critically evaluate:
Everything the call asks for, seen from the call's point of view. Each line shows what answers it, and which partner carries it.
This matrix lists everything the call asks for: outcomes, impacts, scope, the requirements buried in the call text, and policy alignment. Sign up free and GrantForge tracks each line against the concept you build.
| Requirement | Covered by | Carried | Status |
|---|---|---|---|
| Scope activities | |||
| SC1Develop AI-driven solutions and tools for real-time cyber threat detection. Investigating novel machine learning techniques to detect anomalies, malicious activity, and AI-powered cyber threats in real time, improving situational awareness and response times. | · | · | Sign up to track |
| SC2Develop adaptive AI systems capable of evolving with dynamic cybersecurity challenges. Exploring AI techniques that continuously learn from new cyber threats, adapting to emerging attack patterns, while maintaining robustness and explainability. | · | · | Sign up to track |
| SC3Support the future enhancements of Security Operation Centres/Cyber Hubs. Developing AI-enhanced SOC frameworks that integrate predictive analytics, automation, and threat intelligence to strengthen proactive defence measures. | · | · | Sign up to track |
| Expected outcomes | |||
| EO1AI-driven solutions for real-time cyber threat detection; | · | · | Sign up to track |
| EO2Advanced adaptive AI systems that evolve with dynamic cybersecurity challenges; | · | · | Sign up to track |
| EO3Contribute to drastically reduce reaction time for the recovery of systems. | · | · | Sign up to track |
| Other requirements | |||
| REQ1EU classified and sensitive information compliance (EUCI and SEN)Some activities resulting from this topic may involve using classified background and/or producing security-sensitive results (EUCI and SEN), requiring adherence to the related provisions in section B Security of the General Annexes. | · | · | Sign up to track |
| Expected impacts | |||
| No expected impacts in this call. | |||
| Underlying policies | |||
| POL1ai actThe AI Act establishes a regulatory framework for AI systems, categorising them by risk and setting requirements for transparency, safety, and accountability, particularly for high-risk applications like healthcare. | · | · | Sign up to track |
The binding rules of this call. Items marked auto are verified by GrantForge from the call and the template. The others are yours to confirm.
LMIC entities auto-eligible
Low/middle-income country entities are automatically eligible for funding.
EU space data infrastructures
If the project uses satellite-based Earth observation, positioning, navigation or timing data/services, beneficiaries must use Copernicus and/or Galileo/EGNOS. Other sources may be added but not substitute EU infrastructures.
Civil applications only
Horizon Europe funds exclusively civil applications. Research with exclusive military or dual-use application is excluded.
Gender Equality Plan
Having a Gender Equality Plan (GEP) is an eligibility criterion for public bodies, research organisations, and higher education institutions from Member States and Associated Countries.
Open Science
Mandatory open access to peer-reviewed scientific publications and responsible management of research data (FAIR principles, DMP required).
Geographic limitation to Member States and Associated Countries
Participation in this topic is limited to legal entities established in Member States and Associated Countries.
Exclusion of entities controlled by non-eligible countries
Entities established in an eligible country, but directly or indirectly controlled by a non-eligible country or by a non-eligible country entity, shall not participate in the action.
5 key insights you must internalise before writing. Each is grounded in the call text and tells you what evaluators will actually look for. Share these with your consortium before drafting.
Participation is strictly limited to entities established in Member States and Associated Countries that are not directly or indirectly controlled by non-eligible countries. A proposal that includes a partner failing this ownership control check will be rejected at the admissibility stage before any scientific evaluation occurs.
Source: Eligibility rules
Evaluators are explicitly instructed to prioritize proposals demonstrating real-time operational effectiveness in realistic SOC environments. Proposals that focus solely on isolated academic algorithms without integrating them into active Security Operation Centres or Cyber Hub workflows will score poorly during evaluation.
Source: Evaluation criteria (pre-award)
Compliance with the EU AI Act is not a generic policy checkbox but a core evaluation metric. Evaluators expect a thorough risk assessment of existing AI models, demanding concrete verification of the system's resistance against adversarial data poisoning, model drift, and generative hallucination.
Source: Underlying policies
To satisfy the expected outcomes, proposals must provide tangible evidence that reaction and recovery times for SOC operators are drastically compressed. Vague promises of improved efficiency will fail; applicants must define strict baselines and measurable targets for incident response reduction.
Source: Evaluation criteria (pre-award)
Because this call uses a lump-sum funding model, financial execution is entirely dependent on deliverable approval. Proposals must present a highly granular breakdown of work packages and verifiable milestones, as any ambiguity in deliverable definitions will jeopardize payment installments.
Source: Evaluation criteria (pre-award)
Nothing to show for this call yet.