Funding to Support MSMEs under the Cyber Resilience Act

The opportunity focuses on supporting projects that enhance cyber resilience, help businesses achieve compliance with the Cyber Resilience Act, and build MSME capacity in cybersecurity. It is aimed at enterprises involved in the development, manufacturing, import, or distribution of digital products or services that fall, may fall, or will fall within the scope of the CRA. This includes manufacturers, importers and distributors of products with digital elements, open-source software stewards, and other well-justified categories in line with the CRA.

Through its Open Calls for Proposals, SECURE will provide targeted support to eligible MSMEs with a total first call budget of €5 million and funding of up to €30,000 per grant. Selected applicants will receive 50% co-financing for projects designed to improve cyber resilience and support compliance efforts under the CRA.

The programme is open only to individual legal entities that qualify as MSMEs and are legally established in eligible EU and EEA countries. Applicants must meet all legal and ethical requirements and must not be subject to double funding. Consortia and business networks are not eligible under this call.

The funding is specifically intended for businesses whose activities are related to digital products or services covered by the CRA framework. Applicants must demonstrate that their business activity falls, may fall, or is expected to fall within the CRA scope, or clearly show willingness to align with it. Only projects that are aimed at achieving compliance with the CRA will be considered.

SECURE has also highlighted that MSMEs often face challenges such as limited cybersecurity resources and expertise, making targeted support especially important. The project is designed to address these needs through a simple and transparent application process, clear evaluation criteria, interactive guidance tools, and access to a supportive community.

For more information, visit SECURE.