| Topic | HORIZON-CL3-2027-02-CS-ECCC-01 |
|---|---|
| Status | Forthcoming |
| Call | HORIZON-CL3-2027-02-CS-ECCC — Indirectly Managed Action by the ECCC (2027) |
| Type of action | Research and Innovation Actions · lump sum |
| Opening | 2 March 2027 |
| Deadline | 15 September 2027 |
| Budget | EUR 4 million to EUR 5 million per project · 5 projects expected · EUR 24.8 million in total |
| Part B page limit | 45 pages (standard application form; check your call) |
| Template | Work Programme 2026–2027 application form |
Expected outcomes
Projects may contribute to some of the expected outcomes; say which ones and why. The topic says: “Proposals are expected to contribute to one or more of the following:”
- EO1 AI-driven solutions for real-time cyber threat detection.
- EO2 Advanced adaptive AI systems that evolve with dynamic cybersecurity challenges.
- EO3 Contribute to drastically reduce reaction time for the recovery of systems.
What evaluators will look for in this topic
Expected outcomes
- Projects may contribute to some of the expected outcomes; say which ones and why.
- For each outcome (EO1 to EO3), name who will use or adopt your results (a specific group, not “industry” or “society”), how they get them, and the indicator that shows the change, with baseline, target and date.
- Use the topic's own words for each outcome, so the evaluator can tick it off.
What the scope asks for
Evaluators check the proposal against these sentences of the scope. Answer each one visibly, in the call's own words.
- “Proposals should develop solutions for trustworthy AI in cybersecurity contexts including addressing adversarial AI risks, in compliance with the provisions of the AI Act.”
Conditions that shape the proposal
- Part B, sections 1–3: 45 pages (standard application form). Text beyond the limit is not read; tables and figures count.
- Lump sum: the budget is fixed per work package and paid when each work package is completed. Every work package needs activities and deliverables an evaluator can verify, and the effort must match the money.
- Other Eligible Conditions: “In order to achieve the expected outcomes, and safeguard the Union’s strategic assets, interests, autonomy, and security, participation in this topic is limited to legal entities established in Member States and Associated Countries. In order to guarantee the protection of the strategic interests of the Union and its…”
Impact pathway and traps
- Policy or regulation is in scope. Name the policy owners you will reach and what you will give them.
- Keep outputs, outcomes and impacts apart: what you deliver, what changes when others use it, and the long-term effect.
- Link your outcomes to the destination's expected impacts in the Work Programme. Destination impacts are long-term effects, not project deliverables.
- Name the barriers outside the project (regulation, markets, user behaviour) that could block uptake, and what you will do if they do.
- Section 2.3 (the summary canvas) is optional on this call; the old split into scientific, economic and societal impact is no longer required.
The scope, as published
Artificial Intelligence is increasingly utilised in cybersecurity for threat detection, incident response, and adaptive defence mechanisms. However, AI-driven systems themselves are susceptible to adversarial manipulation and bias. This topic aims to advance AI-based cybersecurity applications while ensuring that AI-driven solutions remain resilient, transparent, and compliant with regulatory frameworks such as the AI Act. In this context, the topic explores the role of all types of AI, including generative AI, in cybersecurity applications, including automated threat detection, adaptive cyber defence, and AI-driven cyber threat intelligence. Proposals should develop solutions for trustworthy AI in cybersecurity contexts including addressing adversarial AI risks, in compliance with the provisions of the AI Act. The topic is expected to: Develop AI-driven solutions and tools for real-time cyber threat detection. Investigating novel machine learning techniques to detect anomalies, malicious activity, and AI-powered cyber threats in real time, improving situational awareness and response times. Develop adaptive AI systems capable of evolving with dynamic cybersecurity challenges. Exploring AI techniques that continuously learn from new cyber threats, adapting to emerging attack patterns, while maintaining robustness and explainability. Support the future enhancements of Security Operation Centres/Cyber Hubs. Developing AI-enhanced SOC frameworks that integrate predictive analytics, automation, and threat intelligence to strengthen proactive defence measures.
Other topics in HORIZON-CL3-2027-02-CS-ECCC
- HORIZON-CL3-2027-02-CS-ECCC-02 — Secure Computing Continuum (IoT, Edge, Cloud, Data spaces)
- HORIZON-CL3-2027-02-CS-ECCC-03 — Secure PQC implementations, Cryptanalysis and Post-quantum Digital Trust
- HORIZON-CL3-2027-02-CS-ECCC-04 — New primitives and protocols for functionalities of future hybrid…
Source and attribution
Topic text from the official topic page on the EU Funding & Tenders Portal, retrieved 19 October 2026. © European Union, reused under Commission Decision 2011/833/EU (CC BY 4.0). Changes: the expected outcomes and impacts are split into numbered statements, long passages are shortened, and the evaluator checklist is GrantWise's own commentary. Your call and the Work Programme always win; check them before you submit. GrantWise is independent and not affiliated with, endorsed by, or acting on behalf of the European Commission.