CERTIFAI Project Achievements in 2025: Advancing AI-Driven Continuous Cybersecurity Certification Across Europe

The CERTIFAI project, funded by the European Union, has successfully completed a highly productive year in its mission to develop an innovative, AI-driven framework for continuous and cost-efficient cybersecurity certification. Bringing together leading research organisations, certification bodies, technology providers and industrial partners from across Europe, the CERTIFAI consortium is working to modernise how ICT products and services maintain conformity with cybersecurity requirements throughout their entire lifecycle.

Driving Innovation in Cybersecurity Certification

Traditional conformity assessment relies on static, one-time evaluations, which are insufficient in modern agile development environments. CERTIFAI aims to transform this landscape by creating an open framework that integrates
artificial intelligence, continuous risk monitoring, automated assurance evidence analysis, and cybersecurity threat intelligence.

By aligning with the EU regulations Cyber Resillience Act and AI Act, CERTIFAI contributes to strengthening cybersecurity resilience and ensuring that certified products remain compliant throughout their lifecycle.

Key Achievements in 2025

Throughout 2025, the CERTIFAI consortium made substantial progress across technical development, validation activities, communication and stakeholder engagement. Highlights of the year include:

Advances in Technical Development

During the year, the project delivered several key components and updated iterations of its technology:

• Development of enhanced AI methods to support conformity assessment and automate complex evaluation tasks.
• Further refinement of approaches for correlating cybersecurity evidence to improve the reliability of certification decisions.
• Expansion of methodologies for continuous threat analysis and risk management, enabling proactive identification of vulnerabilities.
• Integration of these components into progressively improved versions of the CERTIFAI Framework, ensuring alignment across technical work packages.
• Deployment of updated demonstrators, allowing the consortium to validate system components in realistic operational environments.
• Completion of multiple internal evaluation phases, providing valuable data and feedback for the final system version.

These advances reflect coordinated progress across research, engineering and validation activities.

Project Coordination, Engagement and Knowledge Sharing

In addition to technical achievements, the consortium strengthened collaboration and dialogue both internally and externally:

• The Midterm Workshop, hosted in 2025, gathered project partners and external stakeholders to share interim results and discuss the evolving landscape of AI-supported certification.
• The EU Review Meeting (April 2025) highlighted strong progress and confirmed the project’s alignment with strategic EU objectives in cybersecurity and AI governance.
• Advisory Board meetings ensured regular expert feedback from leading specialists in standardisation, cybersecurity certification and ICT security.
• Communication and dissemination efforts continued through publications, events, the project website and social media channels—expanding CERTIFAI’s visibility among research, industry and policy communities.
• Standardisation and certification activities were actively supported to help prepare the groundwork for the adoption of project results in European and international frameworks.

Together, these achievements demonstrate strong momentum toward delivering a robust, validated and adoptable solution by the project’s conclusion.

Looking Ahead: Final Steps Towards Completion in 2026

As CERTIFAI enters its final year, the consortium will focus on consolidating results, completing validation and preparing the project’s long-term impact.

Key objectives for 2026 include:

• Delivering the final integrated version of the CERTIFAI Framework, combining all tools, AI components and methodologies.
• Executing the final evaluation activities, assessing the effectiveness, performance and applicability of the solution.
• Hosting the Final Conference, presenting results to EU stakeholders, policymakers, industry actors and cybersecurity communities.
• Publishing the Final Exploitation Plan and concluding communication and dissemination reports to support sustainability beyond the project.
• Engaging with European standardisation and certification ecosystems to help position CERTIFAI results for real-world adoption.
• Completing the final impact assessment and project closure documentation, marking the formal conclusion of CERTIFAI.

About the CERTIFAI Consortium

The CERTIFAI project brings together partners from across Europe — including Spain, Austria, Norway, Cyprus, Greece, Estonia and Czechia. The consortium combines leading expertise in artificial intelligence, cybersecurity research, certification, risk management, software engineering and standardisation.

Project Coordinator:
FUNDACION TECNALIA RESEARCH & INNOVATION (TECNALIA)

The consortium remains committed to contributing to a more secure, resilient and trustworthy digital environment for European citizens, businesses and institutions