If you run a cybersecurity company in Europe, you've probably applied to Horizon Europe Cluster 3. Maybe your national innovation agency too. But those are just two of at least seven EU funding programmes that actively fund cyber startups. Most founders stop after the first two and leave millions untouched.
1. European Defence Fund
This is the one almost nobody in cyber applies to. The EDF has €1 billion in 2026 across 31 call topics, and cybersecurity runs through nearly all of them. Quantum-secured tactical networks, military cloud security, secure communications for autonomous systems. Every modern weapon system needs cyber protection, and the EU doesn't have enough companies building it.
EDF grants cover 100% of eligible costs. No equity, no co-financing. SMEs must make up at least 38% of every consortium, and newcomer companies get bonus evaluation points. If your product protects networks, encrypts communications, or detects intrusions, you qualify.
2. Digital Europe Programme
Digital Europe funds the deployment of cybersecurity solutions, not R&D. If you have a working product and want to roll it out across borders, this is your programme. Funding rate is 50-75%, with calls specifically targeting NIS2 compliance tools, SOC platforms, and threat intelligence sharing.
3. European Cybersecurity Competence Centre (ECCC)
Based in Bucharest, the ECCC runs its own grant calls separate from Horizon Europe. These tend to be smaller (€200K to €1M) but focused and less competitive. They fund cyber range development, skills training platforms, and SME-specific security tooling.
4. EDIP and the new defence procurement instrument
The European Defence Industrial Programme is the EU's first attempt at joint military procurement. Cyber defence is a priority category. This isn't grants for R&D. This is contracts to sell your product to EU militaries. If you're past the R&D stage and have something deployable, this is where the real revenue sits.
5. National co-funding you're probably ignoring
Most EU member states match Brussels funding with national programmes. Germany's Agency for Innovation in Cybersecurity (Cyberagentur) runs its own calls. France has the Cyber Campus ecosystem. Estonia and the Netherlands fund cyber startups through their national defence innovation hubs. These stack on top of EU grants, and applying to both simultaneously is not just allowed, it's expected.
Why cyber founders miss these
The cybersecurity funding landscape is fragmented across defence, digital, and research DGs in Brussels. No single website lists all of them. Most grant consultants specialise in Horizon Europe and don't know the defence side exists. And the word "defence" makes civilian founders assume they don't qualify.
They do. If you're protecting critical infrastructure, building encryption tools, or detecting threats, your technology has defence applications whether you market it that way or not.
The next EDF call opens April 2026. Digital Europe calls run throughout the year. The time to map your options is now.
Check if your technology qualifies
Free eligibility check. We analyse your profile against open EU dual-use funding opportunities and get back to you within 48 hours.
Check your eligibility