Fourteen partners, nine countries, one network

Coordinates the project and provides the technology-readiness-level-8 (TRL 8) operational cyber range where the platform faces 1,000+ adversarial scenarios before any pilot goes live. Engages ISO/IEC JTC 1/SC 27 standards work.

Leads digital twin and cyber range development (WP5), contributing to the W3C FedCM specification and Barkla HPC computing with over 15,000 cores.

Leads platform integration and pre-pilot validation (WP8), advancing the DECML consensus framework with GPU acceleration on the Maxwell HPC cluster, plus a simulated SOC for synthetic attack scenarios.

Runs a 24/7 security operations centre (SOC) processing over one million events daily on Security Onion, leads the federated SOC pilot (Pilot 3), and pairs operational practice with academic rigour.

Leads the Federated Consensus Engine (WP4) and privacy-preserving federated learning research, published at ACM CCS and USENIX Security.

Operates an ISO/IEC 17025-accredited EUCC certification laboratory — validating digital twin fidelity and preparing certification evidence — and participates in ETSI TC CYBER and CEN-CENELEC JTC13.

Leads requirements, architecture and the integration framework (WP2), advancing AI-based network intrusion detection from prototypes that ITTI reports reach 99.94% accuracy, toward operational deployment.

Leads the German cross-sector pilot (Pilot 1) with its cloud-native adversary emulation and validation platform.

Leads dissemination, exploitation and sustainability (WP6, WP11), bringing the MIRA DT platform and the route to market across European public administrations.

Develops the peer-to-peer secure multi-party computation (P2P-SMPC) privacy architecture (WP3) and leads AI threat analysis and automated response (WP9), deploying the Threat Intelligence Knowledge Base across all pilots.

Leads real-world pilot deployment and the TRL 7 demonstration (WP10), coordinating the Greek healthcare pilot and transferring HORSE 6G threat-intelligence technology.

Operates Luxembourg's national CSIRT and a production MISP platform serving 1,000+ organisations; maintains the MISP standard and leads the EU-wide vulnerability intelligence pilot (Pilot 4).

Brings the operational deployment environment for the healthcare pilot: a working 250-bed hospital where false-positive impact on patient safety is measured, not assumed.

Supports the healthcare pilot and connects the project to Greek NIS2 implementation structures.

Affiliated engineering capacity supporting the Greek pilot cluster.