EFIGO

About Efigo
We are Polish cybersecurity company based in Katowice, specializing in penetration testing, security audits, and the development of secure IT systems and infrastructure. We are proud to be one of the companies selected by ENISA for the EU Cybersecurity Reserve — a trusted list of vetted providers available to support EU Member States and institutions in the event of large-scale cyber incidents.

Our R&D track record
To date, our R&D experience has been built within Polish consortia, delivering projects from research through to applied outcomes:

• SPINET (contract no. CYBERSECIDENT/489240/IV/NCBR/2021) — a research and development project focused on IoT cybersecurity, funded by Poland's National Centre for Research and Development (NCBR) under the CyberSecIdent IV programme.

• NCC-PL — carried out under the Third-Party Financial Support Programme in Poland, as part of the National Coordination Centre (NCC-PL) project run by the Ministry of Digital Affairs in cooperation with the Centre for Digital Poland Projects (Centrum Projektów Polska Cyfrowa), co-financed by the Digital Europe Programme and national funds. Under this project, we developed a security audit application, which we can continue to develop and adapt for consortium or partner needs.

We are now taking the next step: expanding into international R&D collaboration through cascade funding, building on the technical foundations and delivery experience gained in our national projects.

Our specialists also independently discover and report vulnerabilities to the CVE database, including findings of international significance affecting products used by well-known vendors and major service providers — further evidence of applied research capability, not just consulting know-how.

What we bring to a consortium

• A proven delivery record in NCBR- and Digital Europe Programme–funded R&D projects, from proposal-stage technical work through to deployable tools

• Deep technical expertise in offensive and defensive security (penetration testing, red teaming, infrastructure and application hardening)

• Practical experience aligning technical solutions with regulatory frameworks (GDPR, ISO 27001/22301, NIS2/KSC, DORA)

• An existing, extensible security audit application developed under NCC-PL, available as a technical building block for future projects

• ENISA-vetted trust status, adding credibility to consortium bids involving cybersecurity or critical-infrastructure components

What we're looking for
Having built our foundation through national R&D projects, we're now looking to join international consortia, particularly under Horizon Europe, Digital Europe Programme cascade funding, or other cross-border R&D calls focused on cybersecurity, IoT/OT security, critical infrastructure resilience, secure digital identity, or AI-driven threat detection. We can contribute as a technical R&D partner, security work-package lead, or pilot/validation partner.