Cybersecurity – Łukasiewicz – Instytut Sztucznej Inteligencji i Cyberbezpieczeństwa

OSCRAT – Supporting European SMEs in Enhancing Cyber Resilience

Łukasiewicz – AI: Expertise in Cybersecurity and Artificial Intelligence

The Łukasiewicz Research Network – Institute of Artificial Intelligence and Cybersecurity (Łukasiewicz – AI) conducts projects with a real impact on digital security. We carry out research, develop tools, and support businesses in increasing their resilience to cyber threats. Our activities help make products and systems across Europe more secure and resistant to attacks.

The OSCRAT Project in Practice

Since 2024, Łukasiewicz – AI has been participating in the international OSCRAT project (Open-Source Cyber Resilience Act Tools), co-funded by the European Union under the Digital Europe Programme. The project aims to develop open, free tools to assist small and medium-sized enterprises (SMEs) in implementing the requirements of the Cyber Resilience Act (CRA) in practice.

The project focuses on increasing the real-world resilience of digital products throughout their entire lifecycle — from design and deployment to incident response.

Activities So Far

Throughout the project, the Łukasiewicz – AI team has presented the OSCRAT tool at numerous international conferences and meetings to gather feedback. A survey was also conducted among SMEs to collect opinions and needs, ensuring that the platform aligns with actual market challenges.
(See information about the OSCRAT survey)

What OSCRAT Offers

CRA Self-Assessment – interactive checklists, role and product category assignments, and reports supporting EU compliance declarations.
SBOM and Supply Chain Security – automatic and manual component lists with vulnerability analysis.
Vulnerability and Incident Management – policy creation, reporting to ENISA and CSIRT teams, improving response capabilities.
Centralized Documentation Repository – all reports, policies, certificates, and security patches in one location.
SME Support – ready-to-use tools and guidelines for quickly implementing cyber resilience principles without building solutions from scratch.

OSCRAT in the European Context

The project is aligned with the CRA, which defines digital product security requirements throughout their lifecycle. OSCRAT fits into the EU’s broader strategy to strengthen digital security and enhance enterprise resilience against cyber threats.

Collaboration and Consultations

OSCRAT is implemented by an international consortium: PMF Research (Italy), Oves Enterprise and ENERSEC (Romania), EDIH Trakia (Bulgaria), Unicis.Tech OÜ (Estonia), and Łukasiewicz – AI (Poland).

Consultations and surveys of SMEs, experts, and business support centers ensure the tools are tailored to real market needs.

Role of Łukasiewicz – AI

As the leader of the WP2 Requirements Gathering and Analysis work package, Łukasiewicz – AI defines the scope and requirements for OSCRAT tools, develops interaction models, the graphical user interface, and cybersecurity specifications.

Summary

OSCRAT provides practical, open support for European SMEs in enhancing the cyber resilience of digital products and preparing for CRA requirements. The platform enables enterprises to efficiently implement digital security principles in their daily operations.

CTI-AI: AI-Based Cyber Threat Detection

In a world where cyber threats are becoming increasingly complex, rapid and effective response is crucial for protecting critical infrastructure and digital security.

Since January 2025, Łukasiewicz – AI has been implementing the CTI-AI project – AI-led Cyber Threat Intelligence (CTI) for Security Operations Centers and National Cyber Security, funded by the European Union under the Digital Europe Programme.

The project aims to optimize the scalability of cybersecurity resources and enhance the operational maturity of Security Operations Centers (SOC) and threat analysis (CTI) through the use of artificial intelligence technologies. CTI-AI supports the implementation of AI in national SOCs, protects critical infrastructure, and strengthens national cybersecurity frameworks.

The project is carried out in a consortium with the following partners: Łukasiewicz EMAG (Poland), EclecticIQ (Netherlands), and NRD Cyber Security (Lithuania). Project activities are guided by the End-User Advisory Board, which includes representatives from national cybersecurity centers in countries such as Lithuania and Iceland. The consortium delivers solutions tailored to the needs of a wide range of users across the European Union, considering national security, defense, and the protection of critical infrastructure.

As part of the project, an AI-powered Threat Intelligence platform is being developed, giving participants access to AI tools and best practices in threat analysis. The project enhances the scalability and efficiency of CTI operations, improving threat detection, information sharing, and incident response in national SOCs, the National Cybersecurity Center, and the broader European industry and public administration.

CTI-AI integrates knowledge and expertise from research, industry, and operational sectors. By publishing best practices and providing access to proven tools and solutions, the project supports the implementation of EU cybersecurity policies and strengthens the digital resilience of the European ecosystem.

To date, project activities have included presentations and participation of Łukasiewicz – AI experts in international conferences such as AIBA and The H@ck Summit, enabling progress reporting and knowledge exchange with other European cybersecurity stakeholders.

Project partners:

Łukasiewicz – AI – Project coordinator,
EclecticIQ (Netherlands)
NRD Cyber Security (Lithuania)

The CTI-AI project is funded by the European Union and contributes to enhancing cybersecurity and digital resilience across Europe.

Wyszukiwarka