EU cybersecurity centre plans calls on AI tools and quantum threats

Calls for proposals on artificial intelligence cybersecurity tools and countering threats from quantum computers are set out in a draft work programme from the European Cybersecurity Competence Centre (ECCC). 

The ECCC was created in 2021 to oversee the development and deployment of cybersecurity solutions across the EU, including coordinating relevant calls under Horizon Europe and the Digital Europe Programme (DEP).

The leaked work programme, dated December 2024, is the centre’s first covering new DEP calls. It expects to mobilise €353 million from 2025 to 2027, although this budget could change in the final document. 

Some €127 million has been earmarked for new technologies, including AI and the transition to post-quantum cryptography.

As part of this, there will be three annual calls in the coming years totalling €45 million, to develop and deploy AI-based cybersecurity tools for national authorities, so they can better analyse, detect and prevent cyber threats.

Two more topics aim to facilitate the uptake of innovative cybersecurity solutions, including AI tools, by small and medium-sized enterprises (SMEs). A central aim of the ECCC is to support SMEs, which do not have the resources to ensure their own protection. 

Funded projects should lead to the creation of toolkits to help SMEs manage cyber risks, and could make use of results from Horizon Europe projects.

Post-quantum cryptography

Quantum computers, which harness the laws of quantum mechanics to solve problems beyond the reach of classical computers, are expected to enable malicious actors to break through the cryptographic algorithms which currently protect confidential data. So the ECCC wants to support the transition to post-quantum cryptography systems, which are resistant to attacks by quantum computers as well as classical computers. 

This year it plans to commit €25 million towards a European infrastructure for testing the deployment of post-quantum cryptography systems. This infrastructure would be open to companies, researchers, and public organisations, with a special focus on supporting SMEs.

The work programme also envisages €111 million across several topics for implementing the Cyber Solidarity Act, which the EU adopted last year to better detect, prepare and respond to cyber threats across the continent.

Finally, €106 million will fund four additional actions on improving cyber resilience, such as bolstering the network of National Coordination Centres and supporting the implementation of other cybersecurity regulations.

A €10 million topic on dual-use technologies, to enhance cooperation between the civil and defence spheres, including through working prototypes and infrastructure, is planned for 2026.

Third country control

The Digital Europe Programme is an €8.1 billion EU initiative to bridge the gap between research and market deployment for digital technologies, in particular cybersecurity, AI, supercomputing and data infrastructure. The EU typically funds 50% of a project’s total eligible costs.

The 2025 cybersecurity calls are currently due to open in the first half of the year, and close in the second half, with evaluations coming in early 2026. The exact dates are to be confirmed.

For security reasons, entities that are established in EU member states but controlled from third countries are not eligible to participate in several of the topics, including the deployment of AI tools. Iceland, Liechtenstein and Norway are exceptions, as they are fully associated to the Digital Europe Programme and are treated in the same way as member states.