Artificial Intelligence for Cybersecurity applications

Expected Outcome:

Proposals are expected to contribute to one or more of the following:

• AI-driven solutions for real-time cyber threat detection;
• Advanced adaptive AI systems that evolve with dynamic cybersecurity challenges;
• Contribute to drastically reduce reaction time for the recovery of systems.

Scope:

Artificial Intelligence is increasingly utilised in cybersecurity for threat detection, incident response, and adaptive defence mechanisms. However, AI-driven systems themselves are susceptible to adversarial manipulation and bias. This topic aims to advance AI-based cybersecurity applications while ensuring that AI-driven solutions remain resilient, transparent, and compliant with regulatory frameworks such as the AI Act. In this context, the topic explores the role of all types of AI, including generative AI, in cybersecurity applications, including automated threat detection, adaptive cyber defence, and AI-driven cyber threat intelligence. Proposals should develop solutions for trustworthy AI in cybersecurity contexts including addressing adversarial AI risks, in compliance with the provisions of the AI Act. The topic is expected to:

• Develop AI-driven solutions and tools for real-time cyber threat detection. Investigating novel machine learning techniques to detect anomalies, malicious activity, and AI-powered cyber threats in real time, improving situational awareness and response times.
• Develop adaptive AI systems capable of evolving with dynamic cybersecurity challenges. Exploring AI techniques that continuously learn from new cyber threats, adapting to emerging attack patterns, while maintaining robustness and explainability.
• Support the future enhancements of Security Operation Centres/Cyber Hubs. Developing AI-enhanced SOC frameworks that integrate predictive analytics, automation, and threat intelligence to strengthen proactive defence measures.

Submissions open on 02 March 2027.

Part of call HORIZON-CL3-2027-02-CS-ECCC

Type of action: HORIZON Research and Innovation Actions

Programme period: 2021 - 2027

Priorities: AI, DigitalAgenda

"> General conditions

1. Admissibility Conditions: Proposal page limit and layout

described in Annex A and Annex E of the Horizon Europe Work Programme General Annexes.

Proposal page limits and layout: described in Part B of the Application Form available in the Submission System.

2. Eligible Countries

described in Annex B of the Work Programme General Annexes. A number of non-EU/non-Associated Countries that are not automatically eligible for funding have made specific provisions for making funding available for their participants in Horizon Europe projects. See the information in the Horizon Europe Programme Guide .

3. Other Eligible Conditions

In order to achieve the expected outcomes, and safeguard the Union’s strategic assets, interests, autonomy, and security, participation in this topic is limited to legal entities established in Member States and Associated Countries. In order to guarantee the protection of the strategic interests of the Union and its Member States, entities established in an eligible country listed above, but which are directly or indirectly controlled by a non-eligible country or by a non-eligible country entity, shall not participate in the action.

described in Annex B of the Work Programme General Annexes.

4. Financial and operational capacity and exclusion

described in Annex C of the Work Programme General Annexes.

5a. Evaluation and award: Award criteria, scoring and thresholds

are described in Annex D of the Work Programme Gen