European SMEs preparing for the Cyber Resilience Act (CRA) may be able to receive up to €30,000 in EU funding to support their compliance efforts.
Through the EU SECURE program, eligible SMEs can receive funding covering 50% of eligible project costs, including CRA gap assessments, cybersecurity risk assessments, vulnerability management, security testing, implementation, training and compliance documentation. Projects can run for up to 180 days, with the current application deadline set for 11 December 2026.
The program is aimed at European SMEs with CRA-relevant products or activities. Applicants must have fewer than 250 employees and meet the applicable EU SME financial thresholds. Funding is competitive and subject to approval.
Turning the subsidy into a practical CRA project
Nemko Digital supports companies across the CRA compliance journey, from determining applicability and identifying gaps to implementing security measures, preparing compliance evidence and validating product security. Depending on an organisation’s needs, a project can focus on areas such as CRA gap assessment, cybersecurity risk management, SBOM, secure development, vulnerability handling or product security testing.
Indicative Nemko Digital service packages range from approximately €5,000 to €15,000, with broader implementation support tailored to the organisation. If approved and fully eligible, the SECURE funding can cover 50% of these costs, subject to the €30,000 grant cap. Nemko Digital can provide the service descriptions, project scope, deliverables and cost estimates needed for the subsidy application, and support companies throughout the full CRA compliance project.
Interested in accelerating your CRA readiness with support from the SECURE program? Connect with Nemko Digital to explore a CRA project that fits your organisation and the funding opportunity.
Download the pdf to find out more about the SECURE project and Nemko Digital’s offer.
