European micro, small and medium-sized enterprises can apply for funding to implement the Cyber Resilience Act until 11 December 2026. A total of 11.5 million euros is available for the second call for proposals under the EU-funded SECURE project.

Second funding round for the Cyber Resilience Act

The second call for proposals under the European SECURE project has been open since 1 October 2026. It is aimed at micro, small and medium-sized enterprises wishing to improve their cyber security and prepare for the requirements of the Cyber Resilience Act. A total of €11.5 million is available across Europe for this purpose until 11 December 2026.

The Cyber Resilience Act sets out uniform cybersecurity requirements for products with digital elements on the EU market. The requirements cover the entire product lifecycle, from development and manufacture through updates and vulnerability management to maintenance and documentation. Initial reporting obligations have been in force since September 2026, whilst the essential requirements will come into full effect from 11 December 2027.

Specific measures to enhance cyber resilience

Funding is available for measures that help businesses implement the requirements of the Cyber Resilience Act and enhance the security of their digital products. The scheme is aimed in particular at manufacturers, importers and distributors of products containing digital elements, as well as those responsible for open-source software, provided they fall within the scope of the regulation.

The need for support is considerable: for the first SECURE call for proposals, with a funding pot of five million euros, around 260 applications were submitted from 28 European countries. A large proportion of the projects focused on preparatory measures such as gap and maturity analyses, the analysis of regulatory requirements, and governance and risk management.

In addition to financial support, SECURE provides freely accessible training courses, workshops, events and practical resources. These include, amongst other things, guidelines, self-assessment tools and open-source resources for implementing the Cyber Resilience Act.

Further information can be found on the SECURE project page at Salzburg Research and on the SECURE4SME website, which contains all the documentation relating to the second call for proposals.

Internal SECURE Consortium

The project is supported by a pan-European consortium comprising national cybersecurity authorities, research institutions and centres of excellence from Italy, Belgium, Spain, Poland, Luxembourg, Romania and Austria, including Salzburg Research.

SECURE wird von der Europäischen Union im Rahmen des Digital Europe Programme gefördert (Grant Agreement Nr. 101190325).