CYSSDE Open Call 3: Penetration testing and vulnerability assessment
Funding for cybersecurity organisations to conduct penetration testing and vulnerability assessments for NIS2-relevant entities, strengthening Europe’s cyber-resilience and security testing capabilities.
Type of projects to be funded: Projects focused on performing penetration testing and vulnerability assessments for end users, including essential and important entities, operators of essential services, digital service providers, government bodies, and SMEs. Activities may include hiring specialised personnel, acquiring or developing cybersecurity testing tools and environments, conducting applied research, accessing intelligence services, and delivering advisory or security assessment services. Selected beneficiaries must conduct at least 10 penetration tests or vulnerability assessments for end users as part of the project.
Sectors / domain: Cybersecurity (penetration testings and vulnerability assessments) and digital infrastructure sectors.
Individual or consortium: Applications may be submitted by a single entity or by a consortium of up to two entities, with one acting as coordinator.
Specific eligibility requirements: Eligible applicants include SMEs (including micro-enterprises and start-ups), mid-caps, large companies, research centres (including universities), and public bodies with proven cybersecurity expertise. Applicants must be registered in and controlled by entities established in EU Member States or EEA countries. Consortia must include at least one entity specialising in cybersecurity. Beneficiaries of CYSSDE Open Call 2 are not eligible. The applicants have to perform at least 10 penetration tests for the end-users.
Specific topics or challenges: Performing penetration tests and vulnerability assessments (at least 10) for end users qualified as essential and importante entities under the NIS2 Directive, operators of essential services, digital service providers, government bodies, and SMEs supporting NIS2-relevant sectors.
Projects duration: Projects are implemented within the CYSSDE Support Programme lasting 18 months.
Budget, funding rates and payment conditions:
Funding rate: 50% of budget (lump sum)
Budget conditions / limitations: Maximum grant amount up to €200,000 per selected proposal; total call budget €2,353,000 supporting up to 12 projects.
Payments: Payments are scheduled in the following tranches, 20% of each will be paid after completion of the whole project: stage 1, up to €10,000 (5% of the grant) by month 2; stage 2, up to €60,000 (30%) by month 7; stage 3, up to €80,000 (40%) by month 16; stage 4, up to €50,000 (25%) by month 19.
Links
Closes
28/04/2026
Max funding per project
200.000€