Skip to content

Cybersecurity diagnostic (Diag Cybersécurité, Bpifrance)

Subsidized cybersecurity diagnostic by an approved expert, with a costed action plan and cyber-crisis preparation.

At a glance

What it is worth
50%of the eligible spend · maximum investment €8,800
Where it stands
Open with no deadline, until the fund runs out
Stacks with other aid
Stacking not stated
Which companies
All companies, large ones included
Who can apply
Independent SMEs with more than ten employees; mid-caps depending on the scope, one diagnostic per site (at most 250 people per site).
How to apply
Request to Bpifrance from the offer's catalogue page.
Who funds it
National (Italy) · France
Official source
Bpifrance · Last checked: 25 September 2026

What it funds

An eight-day mission by an approved expert: an organizational and technical diagnostic, a prioritized and costed action plan, and preparation for a cyber crisis. The cost of the mission is fixed and sits on the card as spend, not as the grant. The description is on the Bpifrance offer page; the aid is State aid, from the Direction Générale des Entreprises (DGE).

Requirements and what is left out

  • Anyone not based in France: the offer is for French companies.
  • Companies with ten employees or fewer.
  • Anyone who is not an independent SME under the EU definition; for a mid-cap, the scope of the mission decides.
  • One diagnostic per site, and the site cannot exceed two hundred and fifty people: a company with several plants can request one for each.

How to apply

  1. Choose the site to assess and check it is within the headcount limit.
  2. Send the request from the Bpifrance offer page.

What this budget builds

The diagnostic delivers a plan; the work is carrying it out. I take the plan's priorities and put them into production in the right order: identities and access, backups verified by an actual restore, an incident response plan somebody has already rehearsed. If the company falls under the NIS2 directive, I line the plan up with those obligations instead of writing two.

This entry is informational and is not advice: I do not handle grant applications, and before committing to a purchase it is worth reading the official source above or talking to whoever files the application.

Not sure where to start? Tell me what you want to solve and I will tell you what can be built, and which incentives cover it.

Write to me