BRUSSELS, 1 October 2026 – The EU-funded SECURE project has opened its second call for cascade funding, giving micro, small and medium-sized enterprises (mSMEs) direct financial support to meet the requirements of the Cyber Resilience Act (CRA).
Eligible organisations can use the funding for Foregenix’s specialised CRA services, including:
- Training & Product Assessment Workshop
- Product Risk Assessment
- Gap Assessment (Annex I Requirements)
- Product Penetration Testing
- Vulnerability Management & Incident Reporting
- CE Conformity Assessment & Technical Documentation Readiness
Notice on Technical Assistance vs. Grant Administration: While Foregenix collaborates directly with mSMEs to execute required technical CRA compliance measures - providing expert consultancy, comprehensive gap assessments, and structured Statements of Work (SOWs) - responsibility for grant the application remains with the applicant.
Second SECURE Open Call Key Information
| 2nd Call Total Budget |
€ 11.5 million |
| Funding per grant |
Up to € 30,000 |
| Target applicant |
Micro, small and medium-sized enterprises (mSMEs) |
| Co-financing |
50% |
| 2nd Call |
01 October 2026 - 11 December 2026 |
Is Your Company Eligible for EU SECURE Project CRA Grants?
To qualify for SECURE grants, your business must fulfill the following primary requirements:
- mSME Status: Fewer than 250 employees and an annual turnover of ≤ €50 million (or balance sheet total ≤ €43 million).
- Geographic Presence: Legally established with headquarters and primary operations in an EU Member State or EEA country (Norway, Iceland, Liechtenstein, Switzerland).
- CRA Scope: Involved with digital products or services that fall under the scope of the Cyber Resilience Act.
- Single Legal Entity: Applying as an independent private body (consortia applications are excluded).
- Exclusion Grounds: Companies must not fall under exclusion grounds, such as convictions for fraud, corruption, money laundering, terrorist offenses, bankruptcy, or being an "enterprise in difficulty."
What is the EU SECURE Project for mSME Cybersecurity Co-Funding?
The SECURE project provides direct cascade funding to European mSMEs developing, manufacturing, importing, or distributing digital products and connected devices. The initiative is designed to lower financial barriers to CRA compliance and elevate cybersecurity standards across the EU.
When is the Application Deadline for EU SECURE Project Grants?
The second SECURE Open Call runs from 01 October 2026 to 11 December 2026. Applicants should ensure all technical scoping and proposal materials are prepared prior to the closing date.
How Does the SECURE Project 50% Co-Financing Model Work?
Grants operate on a 50% co-financing model, covering half of the total eligible project expenses dedicated to CRA compliance activities.
How Much CRA Compliance Funding Can Your mSME Receive?
Eligible mSMEs can receive financial support of up to €30,000 per individual grant to co-fund technical assessments and compliance services.
What Are the Evaluation Criteria for the SECURE Open Call Grant?
Proposals submitted to the SECURE Open Call are evaluated based on three core criteria:
- Excellence and Relevance: Assessment of the project's technical alignment with Cyber Resilience Act (CRA) requirements and the clarity of the scope.
- Impact and Clarity: Evaluation of the expected outcomes in elevating the organisation's overall cybersecurity posture and compliance readiness.
- Implementation: Review of the feasibility, proposed timeline, resource allocation, and budget structure outlined in the Statement of Work.
What is the Total Budget for the 2nd SECURE Open Call?
The second open call features a total allocated budget of €11.5 million to support cyber resilience improvements across European enterprises.
How Foregenix Supports Your SECURE Project Grant Application
Foregenix aligns closely with mSMEs to deliver expert technical services and guidance for CRA compliance. While we do not handle or submit the actual grant application forms on your behalf, we support your preparation by providing detailed Statements of Work (SOW) and formal cost estimates.
Having a clear, professional SOW ready allows you to easily complete your grant application and accurately outline required project budgets.
Which Foregenix Cyber Resilience Act (CRA) Services Qualify for Co-Funding?
Foregenix offers targeted technical assessments and expert consultancy designed to help you meet CRA mandates that qualify for the co-funding grant:
- Training & Product Assessment Workshop: A hands-on session that explains the CRA’s obligations and reviews your products to confirm which are in scope and how they are classified.
- Product Risk Assessment: A structured assessment of the cybersecurity risks to your product, documented in the form the CRA requires and used to decide which security requirements apply and how to meet them.
- Annex I Gap Assessment: A review of your product and processes against both parts of Annex I, covering the essential cybersecurity requirements in Part I and the vulnerability handling requirements in Part II, that shows exactly where you fall short and what needs to change.
- Product Penetration Testing: Hands-on security testing of your product to find exploitable weaknesses before attackers do, giving you evidence that it meets the CRA’s security requirements.
- Vulnerability Management & Incident Reporting: Help build the processes to track, fix and disclose vulnerabilities, and to meet the CRA’s tight deadlines for reporting exploited vulnerabilities and serious incidents.
- CE Conformity Assessment & Technical Documentation Readiness: Preparing your technical documentation and supporting evidence so it’s ready to submit to a notified body or test lab, making your conformity assessment, and ultimately your CE marking, go more smoothly.
How to Start Scoping Foregenix CRA Services Before Applying for Funding
To ensure your SECURE funding application includes a complete technical proposal, schedule a scoping call with our experts. We will define the required technical activities, prepare your formal SOW, and provide estimated service costs so you can submit your grant request before the call deadline.
Step-by-Step Guide: How to Apply for SECURE Project CRA Grants
To submit your application for the EU SECURE project grant, follow these key steps:
- Read the Official Documentation: Carefully review the official call guidelines, eligibility criteria, and Annexes to ensure your project aligns with the requirements.
- Create a SECURE Account: Register an account on the official SECURE platform to access the application forms and submission portal.
- Submit Your Application: Fill out the required proposal details, upload your technical Statement of Work (SOW) and budget provided by Foregenix, and submit your proposal through the SECURE platform before the call deadline.
Ready to Fast-Track Your Cyber Resilience Act (CRA) Compliance Strategy?
Don't miss the opportunity to co-finance your CRA compliance project.
Schedule a scoping call with the Foregenix team today to receive your custom Statement of Work (SOW) and prepare your application before the call deadline.