Academic and R&D partner sought for a Eurostars project on AI-assisted EU Cyber Resilience Act compliance

CVD Portal is a compliance platform for EU Cyber Resilience Act Article 14 reporting, built by Porta Regulus, a Dutch company developing CRA native compliance infrastructure. We are forming a consortium for a collaborative R&D project under Eurostars and are looking for a partner to join.

The project. From September 2026 manufacturers of products with digital elements must run coordinated vulnerability disclosure and report exploited vulnerabilities and severe incidents under the CRA. Most of that work is still done manually. The research question is how far AI can carry it, vulnerability triage, severity assessment, report drafting, evidence assembly, and the mapping of findings to specific regulatory obligations. The work builds on doctoral research into AI as an agile cybersecurity compliance capability and would be validated inside a live reporting platform.

What we bring. A working CRA compliance product, deep regulatory and domain knowledge, a real validation environment, and a route to market. A Dutch SME and a Croatian technology partner are already in the consortium.

Who we are looking for. An academic group or research organisation strong in applied AI, machine learning, or cybersecurity, ideally with experience of collaborative European R&D projects. We would also consider a complementary technology SME in an eligible Eurostars country.

If this fits your group, send a message and we can compare interests on a short call ahead of the next Eurostars cutoff.