Pass Cyber Conseil (Hauts-de-France cybersecurity consulting grant)
Région Hauts-de-France grant on cybersecurity consulting for the region's SMEs: audits, tests and technical recommendation studies.
At a glance
- What it is worth
- 50%of the eligible spend · maximum investment €10,000
- Where it stands
- Open with no deadline, until the fund runs out
- Stacks with other aid
- Stacking not stated
- Which companies
- Only SMEsThresholds per the EU SME definition
- Who can apply
- SMEs in Hauts-de-France on the trade or crafts register, or employer associations with an economic activity, up to date with tax and social contributions.
- How to apply
- Application to the Région Hauts-de-France, supported by Hauts de France Innovation Développement.
- Who funds it
- Regional · Hauts-de-France, France
- Official source
- Région Hauts-de-France · Last checked: 25 September 2026
What it funds
Work by specialized consultants: IT security audits, penetration tests, web security tests, forensic analysis after an intrusion, technical recommendation studies and drafting a security policy. The limit on the card applies to the consulting fees, so to the spend, not to the grant. The detail is on the Région Hauts-de-France page.
Requirements and what is left out
- Anyone not based in Hauts-de-France: the measure is for the region's SMEs on the trade or crafts register.
- Regulated or similar professions, such as liberal professions and pharmacies, and natural persons.
- Recurring day-to-day management of information systems: a support contract is not consulting.
- Anyone who has already applied under this scheme in the last two years.
- Companies in difficulty.
How to apply
- Choose one or more consultants specialized in cybersecurity: they deliver the work.
- File the application with the Région, supported by Hauts de France Innovation Développement.
What this budget builds
An audit is worth the fixes it leaves behind. I set the work up so that the penetration test or vulnerability assessment produces a list of actions ranked by risk, and then I close it: patches, identities, network segmentation, with a second test confirming the gaps found are gone.
This entry is informational and is not advice: I do not handle grant applications, and before committing to a purchase it is worth reading the official source above or talking to whoever files the application.
Not sure where to start? Tell me what you want to solve and I will tell you what can be built, and which incentives cover it.
Write to me