Amsterdam/London, 10th July 2025: As cyber threats continue to increase in both complexity and scale, the pressure on Security Operations Centers (SOCs) to defend critical infrastructure and safeguard sensitive data has never been greater.
To tackle the growing concern, a consortium of European cybersecurity leaders has been awarded a grant under the Digital Europe Program to deploy novel AI technologies for SOCs. The project, named CTI-AI (AI-led Cyber Threat Intelligence), will significantly improve the scalability of analyst resources and maturity of intelligence analysis for national SOCs and the wider European cybersecurity ecosystem.
According to a recent Cybersecurity Ventures report, cybercrime is predicted to cost the global economy $10.5 trillion annually by 2025, underscoring the urgent need for advanced, scalable cybersecurity solutions.
The CTI-AI project aims to revolutionize how cyber threats are identified, analyzed, and mitigated by integrating advanced AI capabilities into the cyber threat intelligence lifecycle. The initiative directly supports the European Union's cybersecurity strategy and NIS2 Directive implementation by enabling organizations to do "much more with less" through AI enhancements to threat intelligence tools.
“With the expanding scope of the NIS2 Directive, national and sectorial SOCs must significantly scale their capabilities as central hubs for intelligence sharing and security response coordination," explained Ujval Bucha, Chief Product Officer, EclecticIQ. "CTI-AI delivers the next generation of tools needed to meet these challenges."
The CTI-AI consortium brings together three leading organizations from across Europe:
- EclecticIQ (Netherlands) – Leading threat intelligence platform
- NRD Cyber Security (Lithuania) – Experts in SOC, CSIRT, and ISAC processes
- INSTYTUT TECHNIK INNOWACYJNYCH EMAG (Poland) – Specialists in applied research for cybersecurity
The project is further supported by an End User Advisory Board that includes the National Cybersecurity Center of Lithuania, the National Cybersecurity Center of Iceland, and other European government and critical infrastructure organizations.
The consortium will create comprehensive best practices and operational procedures for implementing AI in threat intelligence workflows, all validated through real-world implementation with national security organizations.
"This initiative addresses the increasing demands on SOCs resulting from the NIS2 Directive by providing scalable, AI-enhanced capabilities for threat analysis and intelligence sharing," said Ujval Bucha, Chief Product Officer, EclecticIQ.
The CTI-AI project will strengthen Europe's digital technology supply chain by enhancing national security collaboration through more robust threat intelligence exchange and fortifying critical infrastructure with tailored, personalized intelligence sharing. The project will also empower the defense industrial base and SMEs through widely available best practices while accelerating the adoption of AI-enhanced cybersecurity practices across Europe.
For more information about the CTI-AI project, please follow the link: https://www.eclecticiq.com/projects/cti-ai
About the Digital Europe Program
The Digital Europe Program is the EU's funding initiative focused on bringing digital technology to businesses, citizens, and public administrations. The DIGITAL-ECCC-2024-DEPLOY-CYBER-06-ENABLINGTECH call specifically targets novel applications of AI and enabling technologies for Security Operations Centers.
About the Consortium Partners
Łukasiewicz Research Network – Institute of Innovative Technologies EMAG (Ł–EMAG) is a leading Competence Centre within the Łukasiewicz Research Network, focused on artificial intelligence and cybersecurity. The institute specializes in applied computer science, data analysis, decision support systems, and IoT (especially in Industry 4.0, Smart Cities, and intelligent buildings). As a member of Silesia Smart Systems – the Polish EDIH – it supports digital transformation in businesses. Ł–EMAG also provides services in digital public service optimization, laboratory testing, certification, and technical assessments.
NRD Cyber Security offers cybersecurity solutions, consulting, and other services. The company creates a secure digital environment for countries, governments, and organizations and implement cybersecurity resilience enhancement projects around the world.
