Enhancing the Cybersecurity Capabilities of the Domestic SME Sector (SSNS-NCC-HU-FSTP-2026)

WHO CAN SUBMIT A GRANT APPLICATION?

Micro, small and medium-sized enterprises may submit grant applications for the call if they:

• have at least three closed financial years (each supported by financial statements and covering full 365-day period of operation as a pre-company is not included);

• operate in the sectors listed in Annexes 2 or 3 of the Cybersecurity Act

WHAT ACTIVITIES ARE ELIGIBLE FOR SUPPORT?

• Acquisition of new equipment and intangible assets resulting in the enhancement of cyber resilience

• Centralised endpoint protection solutions (traditional antivirus);

• Advanced endpoint protection and incident detection solutions (EDR/XDR);

• Perimeter protection solutions (firewall, Web Application Firewall, proxy, VPN gateway);

• Network traffic monitoring and intrusion detection solutions (WAF, IDS/IPS, NDR);

• Solutions against denial-of-service attacks (Anti-DDoS);

• Data backup and recovery solutions (backup/restore);

• Centralised log collection solutions (log management);

• Advanced log analysis solutions;

• Security information and event management solutions (SIEM);

• Mobile device management solutions (MDM);

• Multi-factor authentication solutions (MFA);

• Identity and access a management solutions (IAM);

• Data loss prevention solutions (DLP);

• Anti-spam and e-mail security solutions;

• Governance, risk and compliance management solutions (GRC);

• Encryption and key management solutions;

• Replacement of hardware or software components that are no longer supported by security update (obsolete hardware/software).

• Procurement of Services related to the enhancement of cyber resilience:

• Cybersecurity testing and assessment services (vulnerability testing);

• Cybersecurity Operations Centre (SOC) services;

• Cybersecurity-related training activities;

• Subscriptions to cybersecurity training platforms;

• Integration of hardware and software tools (system design, implementation, configuration, testing and documentation);

• Cybersecurity-related consulting and professional advisory services.

Details are included in the call for tenders!

The purpose of this call for proposals is to enhance the cybersecurity resilience and risk management capabilities of the domestic SME sector, thereby contributing to the objectives of the European Cybersecurity Industrial, Technology and Research Competence Centre (hereinafter: ECCC) as set out in the Digital Europe Cybersecurity 2025-2027 Work Programme.

Under this call for proposals:

• Micro, small and medium-sized enterprises (SMEs) may submit grant applications without territorial restrictions;

• Applications must comply with the limitations specified in the call;

• Eligible applicants are those operating in the sectors listed in Annexes 2 or 3 of Act LXIX of 2024 on Cyber Security in Hungary.

Call for proposals

• Managing authority: NCC-HU;

• Funding source: Digital Europe Programme and the Hungarian State budget, through NCC-HU call for proposals DIGITAL-ECCC-2024-DEPLOY-NCC-06;

• Evaluation procedure: applications will be evaluated in stages with funding decisions taken in order of the scores achieved within each stage.

Rules and Regulations

The detailed rules on how the NCC-HU manages and uses the are set out in Government Decree No. 474/2025. (XII. 30.) on the detailed rules for the activities of the National Coordination Centre (hereinafter: Government Decree). Applicants are hereby informed that the following documents jointly contain all conditions necessary for preparing and submitting a grant application:

• the call for proposals,

• the Government Decree,

• the General Terms and Conditions (hereinafter: GTC),

• the NCC-HU Accounting Guide (hereinafter: Accounting Guide),

• the grant application form and its annexes.

The managing authority reserves the right to amend the documents. Any amendments will be published and applicants are requested to regularly monitor the official website of the NCC-HU and on the palyazat.gov.hu for updates.

The managing authority may set stricter requirements in the call for proposals than those laid down in the general rules of the Accounting Guide. In the event of any discrepancy between the provisions of the call for proposals and the general provisions of the Accounting Guide, the provisions of the call for proposals shall prevail.

The financing of activities eligible under this call for proposals shall be considered State aid within the meaning of Article 107(1) of the Treaty on the Functioning of the European Union (TFEU).

Such aid maybe implemented in compliance with EU competition law under the following categories of aid and applicable rules:

• General de minimis aid (EU) Commision Regulation 2023/2832