The rise in successful cyberattacks targeting hardware and software products has led to staggering global losses, estimated at EUR 5.5 trillion by 2021, according to the EU Cyber Resilience Act. These breaches are symptomatic of inadequate cybersecurity practices, manifested through widespread vulnerabilities and outdated approaches in identifying and mitigating evolving cyber threats. Maintaining continuous compliance with regulations, industry standards, and best practices further compounds this challenge.
You can download the presentation by clicking the icon.
To fortify digital technologies and mitigate the impact of cyber threats, it’s imperative to evaluate ICT products, services, and processes against security standards throughout their life cycle. However, the conventional certification process remains static and costly, failing to accommodate the dynamics of agile product delivery. Continuous updates and alterations in requirements often expose vulnerabilities, posing significant risks to both users and companies‘ reputations.
1
In response to these formidable challenges, the CERTIFAI project emerges as an innovative solution. It endeavors to create an open software framework employing AI-driven, cost-efficient continuous assessment and (re-)certification methods specifically tailored for ICT products, processes, and services. This proactive approach addresses the evolving cybersecurity landscape by ensuring robust compliance throughout the product life cycle.
2
CERTIFAI’s focus lies in the development of an open software framework designed to integrate AI-driven mechanisms for continuous assessment and (re-)certification. By harnessing the power of artificial intelligence, this framework aims to provide a cost-effective and adaptive solution. This strategy ensures ongoing compliance with established cybersecurity requirements, standards, and technical specifications, fostering resilience against cyber threats.
3
Anchored in the EU Cybersecurity Act, CERTIFAI is committed to leveraging recognized cybersecurity mandates, standards, and technical specifications. This strategic anchoring ensures that the software framework developed maintains sustained compliance throughout the life cycle of ICT products, processes, and services. By adhering to these established principles, CERTIFAI solidifies its role in fortifying cybersecurity measures within the digital landscape.
The CERTIFAI framework incorporates crucial elements aligned with the ENISA Cybersecurity Threat Landscape Methodology:
Identifying potential threats through risk assessment.
Detecting vulnerabilities inherent in products.
Ensuring continuous adherence to standards and regulatory requirements.
CERTIFAI will undergo evaluation and demonstration across four distinct use cases, offering an open resource for the EU’s research and industry communities. By enabling lean re-certification processes, CERTIFAI empowers manufacturers to proactively prevent, detect, counter, and respond swiftly to cyber threats, fostering a more secure and trustworthy digital environment within the European Union.
The CERTIFAI project is a collaborative endeavor that brings together a diverse array of partners, each contributing their expertise and resources towards achieving our shared goal of enhancing cybersecurity in the digital landscape. Our partners include:
Explore commonly asked questions about CERTIFAI, your gateway to enhanced cybersecurity solutions.Â
Get quick insights into our project’s objectives, methods, and how we tackle evolving cybersecurity challenges.
Â
Â
Please note that we continuously update this section to provide the latest information. Discover concise answers that detail CERTIFAI’s unique approach, benefits, and how it stands apart from traditional certification methods.
The CERTIFAI project aims to create a cost-effective AI-driven framework for continuous assessment and certification of ICT products, processes, and services.
CERTIFAI leverages the EU Cybersecurity Act and established cybersecurity requirements to ensure that certified products maintain compliance throughout their life cycle.
CERTIFAI will provide tools for developing threat models, vulnerability testing, and detecting non-compliance, empowering manufacturers to counter and swiftly respond to cyber threats.
To mitigate the impact of evolving cyber threats and ensure conformity to security standards throughout their life cycle.
It’s predominantly static, costly, and not adaptable to agile product updates, leaving products vulnerable to cyber risks with each change.
By developing an open software framework for AI-driven continuous assessment and (re-)certification, aligning with established standards to ensure ongoing compliance throughout a product’s life cycle.
Welcome to the CertifAi Newsroom – your source for the latest updates, press releases, media coverage, and insights from the world of AI assurance and cybersecurity certification.
The CERTIFAI project will culminate in its Final Conference, taking place on 11 June 2026 in Prague, Czech Republic. The event will be held at the Grandium Hotel Prague and will bring together experts, stakeholders, and project partners to present key results and share insights from the project. The conference
The CERTIFAI project, funded by the European Union, has successfully completed a highly productive year
🗓️ On June 4–5, 2025, EZÚ had the pleasure of attending the CS Technology Summit
Have questions, need more information, or interested in collaborating? Don’t hesitate to reach out. Our team is here to assist you.
Stay updated with our latest developments, cybersecurity insights, and industry news by following us on social media.
Subscribe to our newsletter and be the first to receive updates on cybersecurity trends, upcoming events, and exclusive insights.
CERTIFAI – HORIZON-CL3-2022-CS-01
© 2026 CertifAI Project All Rights Reserved.