CYSSDE Open Call 3: Penetration Testing and Vulnerability Assessment
ClosedDescription
The CYSSDE 18-Month Support Programme Upon selection and signature of the Sub-Grant Agreement, beneficiaries will receive up to €200,000 in funding, disbursed across an 18-month tailored Support Programme. Each beneficiary will be paired with a dedicated CYSSDE expert mentor and guided through four operational stages: • Stage 1: Execution Plan (Month 1) Beneficiaries will define a detailed roadmap based on their successful proposal, establishing clear goals, Key Performance Indicators (KPIs), deliverables, and resource allocation. • Stage 2: Developing Testing Scenarios (Months 2–6) This phase focuses on the technical preparation for the external assessments. Activities include strategic planning, designing tailored testing scenarios, and setting up or installing the necessary systems, tools, and environments. • Stage 3: External Assessments with End-Users (Months 7–15) The core operational phase. Beneficiaries will deploy their services to the market, executing a minimum of 10 penetration tests and vulnerability assessments for their selected end-users (critical infrastructures, essential services, or SMEs). • Stage 4: Outputs and Sustainability Services (Months 16–18) The final stage focuses on maximising impact and mitigation. Beneficiaries will be guided in generating publications (anonymised where necessary), managing responsible vulnerability disclosures to operating organisations or manufacturers, and providing ongoing risk monitoring services.
Beneficiary & submission
- How to Apply
Proposals must be submitted online via the FundingBox platform (which for this Open Call is OnePass – GetOnePass.eu).
Application Link: https://opportunities.getonepass.eu/applications/cyssde/start
Support: For inquiries, please contact the helpdesk at: helpdesk@cyssde.eu
Project Website: https://cyssde.eu/
- Who Can Apply?
We are looking for entities with cybersecurity expertise.
Eligible Applicants: SMEs, mid-caps, large companies, research centres (including universities), and public bodies.
Composition: Applications are accepted from individual entities or consortia (up to 2 entities, led by a cybersecurity specialist).
Geographical Eligibility: Applicants must be registered in and controlled by entities within an EU Member State or an EEA country.
Note: Entities subject to EU restrictive measures or controlled by non-EU/non-EEA third countries are not eligible.
- Proposals will be evaluated based on Excellence, Impact, and Implementation:
1. Admissibility & Eligibility Check
2. Expert Evaluation: Assessment by at least 2 independent external experts.
3. Consensus Meeting: Selection of finalists by the CYSSDE Selection Committee.
4. Interview (Optional): The CYSSDE Selection Committee may request an interview to clarify specific aspects of the proposal before the final decision.
Further information
Call Overview:
The CYSSDE project invites entities with cybersecurity expertise to apply for Open Call 3. This initiative, funded by the European Union, aims to strengthen the cyber resilience of Member States by supporting the practical implementation of the NIS2 Directive and the Cyber Resilience Act (CRA).
The objective of this call is to select up to 12 projects that will conduct penetration tests and vulnerability assessments for critical sectors.
Scope and Objectives
Selected beneficiaries will enter an 18-month Support Programme to deliver high-quality security testing services. The primary requirement for each beneficiary is to perform at least 10 penetration tests for external end-users.
Financial Support and Benefits:
Maximum Grant: Up to €200,000.00 per project (Lump Sum).
Funding Rate: 50% co-funding (applicants must cover the remaining 50% through their own resources).
Non-Financial Support: Access to the CYSSDE Mentoring Programme, including technical guidance, tool repositories, and networking with the European cybersecurity ecosystem.