What European Cybersecurity Competence Centre (ECCC) does

The European Cybersecurity Competence Centre (ECCC) is a body of the European Union established by Regulation (EU) 2021/887 and headquartered in Bucharest, Romania. Its statutory mandate is to increase Europe's cybersecurity capacities and competitiveness by pooling and coordinating EU, Member State, and private investment in cybersecurity research, innovation, and deployment. The ECCC does not sell products or services; instead, it acts as a centralised funding and strategic-coordination authority, managing cybersecurity actions under the Digital Europe Programme (Specific Objective 3) and contributing to Horizon Europe Pillar II (Cluster Civil Security for Society, Section 3.1.3). It serves National Coordination Centres (NCCs) in all 27 EU Member States plus Iceland and Norway, alongside EU industry (SMEs and startups), academia, and public authorities including operators of essential services under the NIS 2 Directive.

The ECCC's core operational products are programmatic rather than commercial. They include: (1) the NCC Network acting as national-level touchpoints that can receive direct EU grants and disburse financial support to third parties; (2) the European Cybersecurity Alert System of National and Cross-Border Cyber Hubs mandated by the EU Cyber Solidarity Act, which uses AI and data analytics for cross-border threat detection; (3) the ATLAS Cybersecurity Community Platform launched 1 December 2025 to coordinate NCC registrations; and (4) the Strategic Advisory Group providing expertise to the Governing Board. Recent funding actions include a EUR 56.2M Horizon Europe call (March 2026), a EUR 50M DEP call (October 2025), a EUR 4M Cyber Hubs call (December 2025), a EUR 25M Post-Quantum Cryptography Testing Infrastructure tender, and a EUR 40M submarine cable repair call (June 2026). The ECCC operates with a lean staff of 34 employees under Executive Director Luca Tagliaretti.

The ECCC's revenue model is public funding only. It receives appropriations from the EU budget (Digital Europe Programme and Horizon Europe) and co-financing from Member States; it has no commercial pricing, no shareholders, no parent company, and no subsidiaries. The Centre is governed by a Governing Board comprising one representative per Member State plus two European Commission representatives, with the Union holding 26% of voting rights on budget-related decisions. Distribution is achieved indirectly through the NCC Network, which acts as the primary channel for channelling EU funds and guidance to national cybersecurity communities.

Name

European Cybersecurity Competence Centre (ECCC)

Legal name

European Cybersecurity Industrial, Technology and Research Competence Centre

Website

https://cybersecurity-centre.europa.eu

Company type

Public

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

The ECCC is an EU body, headquartered in Bucharest, that coordinates cybersecurity funding and industrial policy across the EU-27 plus Iceland and Norway via the Digital Europe Programme and Horizon Europe, serving National Coordination Centres, industry, academia, and public authorities.

Ownership category

akta.pro rank

Product category

Cybersecurity Policy Coordination

NAICS

Executive, Legislative, and Other General Government Support (921), Public Administration (92)

SIC

Services-Business Services, Nec (7389)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

akta.pro secondary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• Cybersecurity funding coordination
• EU cybersecurity policy
• National coordination centres
• Cyber threat detection
• Horizon Europe cybersecurity

Headquarters

HQ city

Bucharest

HQ country

Romania

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure

Distribution channels1 record

Marketing channels6 records

Core offering

The European Cybersecurity Competence Centre (ECCC) is an EU body that coordinates cybersecurity funding, research, and deployment across Europe through the Digital Europe Programme and Horizon Europe. It operates a Network of National Coordination Centres (NCCs) across all 27 EU Member States plus Iceland and Norway, and supports the European Cybersecurity Alert System composed of National and Cross-Border Cyber Hubs. The Centre does not sell commercial products but manages grant funding and policy coordination for cybersecurity stakeholders.

Product overview

The European Cybersecurity Competence Centre (ECCC) is an EU body that coordinates cybersecurity funding, research, and deployment across Europe. It operates as a platform organization centered around a Network of National Coordination Centres (NCCs) spanning all EU Member States, managing Digital Europe Programme and Horizon Europe cybersecurity funding. Key offerings include the ATLAS Cybersecurity Community Platform for coordination, the European Cybersecurity Alert System composed of National and Cross-Border Cyber Hubs, and various funding programmes supporting AI-based threat detection, post-quantum cryptography transition, and cybersecurity skills development.

Differentiator

Problem solved

Functional benefit

Products and services

• National Coordination Centres (NCCs) Network A network of national-level entities established in each EU Member State plus Iceland and Norway to serve as primary points of contact for the Cybersecurity Competence Community, coordinating between national stakeholders and the ECCC.
• European Cybersecurity Alert System A system composed of national and cross-border Cyber Hubs that use advanced technology including Artificial Intelligence and data analytics to detect and share threat warnings across borders.
• ATLAS Cybersecurity Community Platform A cybersecurity platform enabling NCCs to submit national registrations and supporting improved coordination across the Cybersecurity Competence Community.
• Digital Europe Programme (DEP) Cybersecurity Funding Management ECCC manages cybersecurity aspects under Specific Objective 3 of the Digital Europe Programme, financing uptake and deployment actions including AI, post-quantum transition, and SME support.
• Horizon Europe Cybersecurity Actions ECCC contributes to Horizon Europe Pillar II Cluster Civil Security for Society, section 3.1.3 Cybersecurity, supporting technologies from secure components to self-healing networks.

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Four partnerships are on record, tiered core.

• ENISA (European Union Agency for Cybersecurity)coreOthers · 8 June 2021ENISA serves as a permanent observer on the ECCC Governing Board. The Agency also provides the Data Protection Officer function for the ECCC under a Service Level Agreement. ENISA and ECCC collaborate on cybersecurity policy and capacity building initiatives.
• European CommissioncoreOthers · 8 June 2021The European Commission is represented on the ECCC Governing Board with two representatives and an alternate. The Commission holds 26% voting rights on decisions affecting the EU budget. The ECCC implements cybersecurity aspects of EU programmes under Commission oversight.
• National Coordination Centres (NCCs) NetworkcoreStrategic or Co-development Partner · 8 June 202127 National Coordination Centres established across EU Member States plus Iceland and Norway. NCCs are nominated by Member States, possess cybersecurity expertise, and serve as the primary national touchpoints for the Cybersecurity Competence Community. They can receive direct EU grants and provide financial support to third parties.
• Horizon Europe Consortium PartnerscoreStrategic or Co-development PartnerThe ECCC coordinates implementation of cybersecurity research under Horizon Europe Pillar II, Cluster Civil Security for Society, Section 3.1.3. Consortium partners include research institutions, industry, and public sector entities participating in joint cybersecurity research actions.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Europol European Cybercrime Centre (EC3): EC3 is the EU's operational hub for combatting cybercrime, hosted within Europol. While its mandate is law-enforcement focused rather than industrial policy, it operates at EU level with cross-border threat intelligence functions that overlap thematically with the ECCC's Cyber Hubs and European Cybersecurity Alert System.
• European Defence Agency (EDA): EDA is an EU intergovernmental agency that, like the ECCC, pools Member State resources and coordinates capability development at EU level. Its governance structure (Member State representatives, Commission participation) and its role in coordinating collaborative R&D programmes are structurally analogous to ECCC's coordination of Horizon Europe and DEP cybersecurity actions.
• eu-LISA (EU Agency for the Operational Management of Large-Scale IT Systems): eu-LISA is a sibling EU agency that operates large-scale IT systems in the area of freedom, security and justice. It shares the ECCC's institutional profile (EU body, Regulation-established, Member State governance) and was the previous employer of ECCC's Executive Director, making it a strong structural peer for governance and operational scale benchmarking.
• Cybersecurity and Infrastructure Security Agency (CISA): CISA is the US federal agency coordinating critical infrastructure cybersecurity and is the most-cited national-level analogue to the ECCC's mandate. Although it operates in a different geography and has operational rather than funding-coordination focus, its multi-stakeholder coordination model and Cyber Hubs-style initiatives make it a useful structural comparator.
• European Innovation Council (EIC): The EIC is the EU's flagship deep-tech innovation funding instrument under Horizon Europe. While not cybersecurity-specific, it shares the ECCC's role in channelling EU programme funds to European SMEs, startups and research organisations, and is a relevant comparator for funding-call design and SME uptake mechanisms.

Direct peers

• ENISA (European Union Agency for Cybersecurity): ENISA is the EU's operational cybersecurity agency and the closest peer to the ECCC within the EU institutional landscape. Both operate under EU mandates in the cybersecurity domain, with ENISA focused on capacity building, advisory and operational cooperation and ECCC focused on funding, industrial and research coordination. They are complementary sister bodies and ENISA holds a permanent observer seat on the ECCC Governing Board.

Regional players

• ANSSI (Agence nationale de la sécurité des systèmes d'information): ANSSI is France's national cybersecurity authority and one of the most mature national agencies in the EU. It serves a single Member State rather than the EU-wide footprint of the ECCC, but its national Cyber Hub-style coordination and NIS2 implementation experience make it a relevant peer for capacity-building design.
• National Cyber Security Centre (NCSC, UK): NCSC is the UK's national technical authority for cyber incidents. It operates in a different geography from the ECCC but provides a national-level model for cyber threat detection, advisory and incident response that the ECCC's cross-border Cyber Hubs are designed to scale across the EU.
• BSI (Bundesamt für Sicherheit in der Informationstechnik): BSI is the German federal cybersecurity agency and a recognised European leader in certification and standards. It operates at national level rather than EU-wide, but its technical authority role and close cooperation with the ECCC's NCC network make it a frequent collaborator and structural peer.

Others

• NIS Cooperation Group (EU NISCG): The NIS Cooperation Group is an EU-level body under NIS/NIS2 that supports strategic cooperation on cybersecurity among Member States. It is thematically adjacent to the ECCC, operating in the same EU cybersecurity ecosystem but focused on policy coordination rather than funding deployment.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/Cybersec_ECCC
• LinkedInlinkedin.com/company/cybersec-eccc
• Instagraminstagram.com/cybersec_eccc

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about European Cybersecurity Competence Centre (ECCC)