The Basque Government's Industrial Cybersecurity 2026 programme, managed by SPRI, closes for applications on 23 November 2026 at 23:59. It covers up to 60% of the project, and grants are awarded on a first-come, first-served basis until the budget runs out.
Who can apply
Industrial companies and services linked to industrial products or processes, of any size, with a site in the Basque Country and registered for the Basque business activity tax (IAE). The project must be carried out at that site.
How much it covers
- Non-repayable grant of up to 60% of eligible expenditure, up to a maximum of €100,000 per company.
- The total budget for the call is €14 million.
- It is calculated excluding VAT, and the hours of the company's own staff do not count.
What can be funded
Consultancy, engineering, hardware and software licences linked to the cybersecurity project, including software as a service for up to 12 months. Assessments, action plans, implementation of measures, training and certification processes under frameworks such as ISO 27001 or the ENS are all eligible.
Requirements not to overlook
- External consultancy or engineering must account for at least 20% of the eligible expenditure: projects that only buy equipment or licences are not accepted.
- For expenses over €15,000 (excluding VAT) with the same supplier, three quotes are needed before committing the expense.
- The application must include a technical and financial proposal with a breakdown of tasks, hours and schedule.
- The project can last up to 12 months and the grant is paid in a single instalment once it has been justified, so the company pays the costs up front.
Watch the time: SPRI's technical support for applications ends at 15:00 on 23 November. Do not leave your application until the last night.
Which projects are a good fit
- Plant network segmentation and separation between offices and production.
- Secure remote access for machine maintenance suppliers.
- Vulnerability scanning, penetration testing and a remediation plan.
- Immutable backups and a ransomware recovery plan.
- NIS2 compliance assessment or alignment with the ENS.
How we can help
We prepare the technical and financial proposal with you, with the breakdown of tasks and hours the call requires, and we deliver the project. If you miss this deadline, the assessment will still be useful for future calls and for NIS2.