Focal Point logo

Research built
for operational use.

We take on EU-funded research projects that can end up as working tools for defenders. We work alongside universities, research centres and industry partners across Europe, and publish what we learn.

Our R&D focus

Our research concentrates on four areas, each linked to the training and services we deliver.

01 / 04

Advanced cyber ranges

Realistic, repeatable environments for exercises and validation: deployment methodologies, ICS and IoT simulation, adversary emulation and automation.

02 / 04

AI

Cybersecurity training methods

How cyber practitioners learn best: gamified learning, AI as an adversary or an assistant, and skills-based assessment.

03 / 04

Detection engineering

Generating detection rulesets systematically, managing APT threats, and deploying the results on industry-standard tools mapped to MITRE ATT&CK.

04 / 04

Critical infrastructure security

ICS/OT threat modelling and risk scenarios for energy, transport and maritime, where a disruption stops essential services. Aligned with NIS2 and IEC 62443.

Research projects, past and present

A mix of Horizon Europe, Digital Europe and European Defence Fund (EDF) projects.

HARPIA-Defence logo

HARPIA-Defence

Active

Dec 2025 – Nov 2028

An integrated defence ecosystem combining autonomous AI systems, blockchain-secured communications and GPS-independent operations, built on a modular architecture for rapid deployment.

Visit project website

This project has received funding from the European Union’s European Defence Fund (EDF) under Grant Agreement No. 101224172.

Our role

HARPIA-Defence

We lead the early design work, from gathering user requirements to defining the HERMES-Hub architecture. We then contribute to building the prototype, lead the interoperability testing of its components, and run the training that prepares operators, maintainers and cybersecurity specialists to use the system.

CYberSynchrony logo

CYberSynchrony

Active

Jul 2024 – May 2027

A modular framework unifying technology, people and process to strengthen organisational resilience and incident response capability.

Visit project website

This project has received funding from the European Union’s Digital Europe Programme (DIGITAL) under Grant Agreement No. 101158555.

Our role

CYberSynchrony

We coordinate and support the implementation of advanced technologies and secure processes, integrating tools for threat detection, secure communication and incident response. We also mentor the winners of the project's open call.

CyberSecPro logo

CyberSecPro

Completed

Jun 2023 – Feb 2026

27 partners from across Europe, including universities, companies and quality assurance bodies, building hands-on, working-life training that connects university teaching with the skills employers need.

Visit project website

This project has received funding from the European Union’s Digital Europe Programme (DIGITAL) under Grant Agreement No. 101083594.

Our role

CyberSecPro

We contributed to running the professional training programme and to its evaluation and benchmarking. Our training platforms hosted live cyber defence exercises, with blue teams defending a virtual network against red team attacks, and tabletop exercises testing incident response at executive and technical level.

DomeSentinel

Completed

Jun 2025 – Jan 2026

AI-driven threat detection with VR cyber defence simulation in smart home and manufacturing contexts, benchmarked against established SIEM tooling.

Visit project website

This project has received funding from the Horizon Europe Framework Programme (2021–2027) under grant agreement No 101120779.

Our role

DomeSentinel

We coordinated DomeSentinel with Plaixus, under the CyberSecDome open call. Using our cyber ranges, we simulated attacks in smart home and manufacturing environments to benchmark CyberSecDome's AI-driven detection and response against Microsoft Sentinel and Wazuh.

SENTINEL logo

SENTINEL

Completed

Jun 2021 – May 2024

Helped European SMEs and micro-enterprises close their security, privacy and data protection gap, with automated GDPR compliance, identity management and threat detection in one framework.

Visit project website

This project has received funding from the European Union’s Horizon 2020 Research and Innovation programme under grant agreement No 101021659.

Our role

SENTINEL

We led three tasks: integrating and deploying the platform's cybersecurity components, building the module that drafts tailor-made security policies for each SME, and preparing the pilots and experimentation protocol for real-life trials.

CYRENE logo

CYRENE

Completed

Oct 2020 – Sep 2023

Supply chain resilience through dynamic cyber risk assessment and conformity evaluation across interconnected IT infrastructures.

Visit project website

This project has received funding from the European Union’s Horizon 2020 Research and Innovation programme under grant agreement No 952690.

Our role

CYRENE

We brought our risk management expertise to developing the CYRENE methodologies and designing the system's risk assessment functions. We also helped plan the pilots, define scenarios and test cases, evaluate the results, and plan industrial dissemination and exploitation.

AI4HEALTHSEC logo

AI4HEALTHSEC

Completed

Oct 2020 – Dec 2023

Improved cyber-attack detection in healthcare critical infrastructures, raising awareness and breach response capability across the sector.

Visit project website

This project has received funding from the European Union’s Horizon 2020 research and innovation programme under Grant Agreement 883273.

Our role

AI4HEALTHSEC

We led the work package on the self-organised swarm intelligence system. We also helped specify the platform architecture, designed and developed the dynamic cyber situational awareness framework, and contributed to dissemination.