An independent tool index
for incident response teams
Cybersecurity tools whose development or a named component has received documented EU support. Follow the programme, the project and the source before drawing a conclusion.
Filter these tools in the indexA primary source must connect the tool or a specific part of its development to an EU funding programme. An EU address, a national grant or a developer’s membership in an unrelated consortium is not enough. Read the funding method.
Funding can be historical, limited to a component or awarded through an intermediary. It does not establish current funding, ownership, certification or endorsement. Tools without a documented match remain in the main index.
20 tools with a documented funding connection. Research checked 11 October 2026.
Threat intelligence · Luxembourg
Inspect the full profileThe 2017–2019 action supported development of MISP for information sharing. This is a completed funding action, not a statement about current financing.
Feed automation · Austria
Inspect the full profileCERT.at reports funded IntelMQ development, including the 2.1 and 2.2 releases, under this 2019–2021 action. The action has closed.
Feed automation · Poland
Inspect the full profileJTAN supported n6 authentication, data-source, performance and portal improvements. The project finished in June 2024.
Threat intelligence · Slovakia
Inspect the full profileThe upstream project credits ERDF support through OPII for Taranis NG. It does not identify the specific action or funding dates in this acknowledgement.
The upstream project credits CEF support through the MeliCERTes Facility. SMART2018/1024 is a contract reference; the acknowledgement does not establish ongoing funding.
The upstream project credits JTAN for Taranis NG development. The project finished in June 2024; this records historical support.
Malware analysis · Poland
Inspect the full profileJTAN supported MWDB Core visualisation, structured analysis results and MISP sharing improvements. The project finished in June 2024.
Threat intelligence · Luxembourg
Inspect the full profileAIL identifies its instance synchronisation protocol, released in version 4.0 in December 2021, as JTAN-funded development. JTAN finished in June 2024.
Threat intelligence · Luxembourg
Inspect the full profileBGP Ranking identifies its late-2018 Python rewrite as work within the EU co-funded D4 project. This concerns that development phase, not all subsequent releases.
Response coordination · Luxembourg
Inspect the full profileCerebrate credits CEF co-funding through the MeliCERTes Facility for the project. SMART2018/1024 is a contract reference, and the source does not establish ongoing funding.
Detection and monitoring · Spain
Inspect the full profileThe 2017–2019 SME Instrument action supported development of CounterCraft’s deception platform. This is historical product development support, not an endorsement of its current edition.
Detection and monitoring · Luxembourg
Inspect the full profileThe D4 sensor and analysis platform was supported by this action from November 2018 to April 2021. The completed grant does not establish funding for every later D4 component.
Malware analysis · Poland
Inspect the full profileJTAN supported DRAKVUF Sandbox installation, maintenance and Intel Processor Trace work. The project finished in June 2024.
Response coordination · Luxembourg
Inspect the full profileFlowIntel acknowledges FETTA support for its case and task management project. FETTA began in 2024 as a three-year action; the source does not allocate funding by feature.
Malware analysis · Poland
Inspect the full profileCERT Polska identifies Hfinger development in 2020 as AMCE work and expressly credits CEF co-financing. This is historical development funding.
Malware analysis · Poland
Inspect the full profileNASK identifies Karton as a tool developed under AMCE, which ran from June 2019 to December 2021. The funding record is historical.
Detection and monitoring · Luxembourg
Inspect the full profileKunai acknowledges NGSOTI support for the project. The action runs from January 2024 to December 2026; funding by feature is not specified.
Malware analysis · Luxembourg
Inspect the full profileKunai Sandbox acknowledges NGSOTI support for its Linux sandbox project. The action runs from January 2024 to December 2026; funding by feature is not specified.
Malware analysis · Poland
Inspect the full profileNASK identifies mquery as a tool developed under AMCE, which ran from June 2019 to December 2021. The funding record is historical.
Exposure discovery · Luxembourg
Inspect the full profileThe April 2026 Plum announcement attributes development support to FETTA. This applies to the perimeter monitoring project and does not assign it the older D4 grant.
Response coordination · Austria
Inspect the full profileCERT.at explicitly identifies partial CEF funding for the tuency constituency portal under this 2019–2021 action. The action has closed.
Threat intelligence · Luxembourg
Inspect the full profileVulnerability-Lookup acknowledges NGSOTI co-funding. The action runs from January 2024 to December 2026; the acknowledgement does not specify an amount for this tool.
Know a missing funding record? Send the grant reference and a source connecting it to the tool.
Suggest a tool or correction