Europe put €42m behind AI cyber-defence projects—but results do not exist yet
Three 36-month Horizon Europe projects bring together more than 70 partners across 14 EU states and the UK. Their promised agentic defences remain untested plans.
The short version
- What happened
- The European Cybersecurity Competence Centre announced three Horizon Europe projects worth about €42 million, involving more than 70 partners across 14 EU Member States and the UK.
- Who it affects
- Workers responsible for hospitals, transport, factories and public services may eventually gain new defensive tools. They also need clear human authority to stop an automated response that is wrong or unsafe.
- What remains unproven
- Programme announcement
Keep in mind
Programme announcement
No completed system evaluation
No operational security outcomes
No independent validation
Three-year research horizon
Objectives supplied by funded projects
Multi-source analysis · 3 linked sources. Primary analysed source date: 29 October 2026. Earliest linked supporting source: 7 October 2026.
Read the full report · 3 min The evidence, methods, implications and limitations
A research commitment, not a deployed shield
The European Cybersecurity Competence Centre has launched a three-project research cluster for generative AI in cybersecurity, backed by about €42 million in Horizon Europe funding. The official 29 October announcement says more than 70 universities, research bodies, companies and public authorities from 14 EU Member States and the UK will participate. The programmes started on 1 October and are scheduled to run for 36 months.
The scale matters because the projects target telecoms, rail, finance, maritime systems, vehicles, healthcare, media and smart cities. But the launch does not demonstrate a working defence. It reports planned architectures, pilots and partners. Security teams should not treat the announcement as evidence that an autonomous agent can safely identify threats, remediate incidents or translate regulation into reliable controls.[1][2][3]
Three overlapping routes to AI-assisted defence
AICYROS, coordinated by the University of Murcia, has an official EU contribution of €13,996,945 and plans thirteen modules spanning detection, response, secure deployment and compliance-as-code. Its validation list covers research networks, telecoms, industrial systems, robotics, vehicles, media, healthcare and smart cities. AIGENTIC, coordinated in Greece, proposes guardrailed agents for threat intelligence, response, recovery and regulatory compliance across nine use cases.
GENESIS-AI, coordinated by the University of Zagreb, has an EU contribution of €13,709,654.99. It proposes multi-agent and mixture-of-experts components, federated privacy-preserving learning, automated rule translation and red-team/blue-team co-evolution, with secure cyber-range validation. Siemens, Airbus and Bosch are among its listed industrial partners. These descriptions are project objectives supplied by the programmes themselves, not independently measured performance.[1][2][3]
The distinction that matters
What exists now—and what is still promised
The launch establishes funding and project scope, while operational evidence remains future work.
Confirmed
Three projects started
About €42m; 70+ partners
Planned
Build agentic defence systems
Detection, response and compliance
Unproven
Test in sectors and cyber ranges
No published outcome results yet
The evidence test comes later
Agentic security creates its own risks: a false detection can interrupt operations, an automated response can amplify damage, and a system trained across organisations can leak or inherit sensitive threat data. A useful evaluation will need realistic baselines, attack coverage, false-positive costs, time-to-detect and time-to-recover, human override performance and evidence that privacy and compliance claims survive adversarial testing.
The cluster aligns with an EU action plan adopted in July, so this is a policy and funding development rather than a scientific result. The assessment should change only when the projects publish reproducible methods, independent tests and sector-specific outcomes. Until then, the concrete fact is the commitment of money, partners and three years of work—not a proven cyber-defence capability.[1][2][3]