Romanian cybersecurity company Safetech Innovations says it has joined CyberINTEL-X, a 36-month European research and innovation project intended to improve how security operations centres and incident-response teams detect threats and coordinate action. In a current report published to the Bucharest Stock Exchange on November 6, the company disclosed an allocation of €643,750 for its participation, including €450,625 in non-repayable funding. The disclosure establishes Safetech’s participation and its budget allocation; it does not, by itself, demonstrate that project tools are already operational or that they have produced measurable security outcomes.

What Safetech disclosed

Safetech Innovations S.A. disclosed its participation in the European project CyberINTEL-X in a current report filed through the Bucharest Stock Exchange’s issuer-information system. The BVB page records publication at 08:30:18 on November 6, 2026, and identifies it as Current Report 45/2026. The full report is titled “Participation of Safetech Innovations S.A. in the European CyberINTEL-X Project.” This is the direct company disclosure, rather than an inference drawn from a market listing or a secondary headline.

According to the company, CyberINTEL-X is an innovation action under the Horizon Europe call HORIZON-CL3-2025-02-CS-ECCC, “Increased Cybersecurity.” Safetech states that its allocated project participation value is €643,750, of which €450,625 is non-repayable funding. Those figures describe the allocation to the company, not the total project budget, and the disclosure does not say that the entire amount has already been received. The difference between the allocation and the grant component is €193,125; the report does not characterize that balance as a specific source of financing, so it should not be labelled as company cash, match funding, or an amount payable without further documentation.

Safetech reports a project duration of 36 months and says the international consortium has 23 partners. Its description names real-time threat detection, secure exchange of cyber-threat information, and coordinated crisis management as project aims. The work is intended to involve security operations centres, computer security incident response teams—including the CSIRT Network—and national authorities. The filing is a useful snapshot of intended work and company-level funding, not an announcement that a finished platform is being deployed.

What CyberINTEL-X is designed to do

From detection to coordinated response

The project’s full name, “From Detection to Action – The Next Generation of Operational Cybersecurity for SOCs and CSIRTs,” describes a practical emphasis. A security operations centre monitors systems and investigates potential security events, while a computer security incident response team coordinates handling of incidents. In a complex attack, these groups may need to share trustworthy indicators quickly, assess whether separate alerts are connected, decide on containment, and communicate with relevant authorities. The company says CyberINTEL-X intends to support that operational chain with an integrated suite of AI-based tools and working frameworks.

That framing matters because the word “AI” can suggest a self-operating defence system, when Safetech’s filing describes a project pursuing tools and frameworks. It does not identify specific models, data sources, technical architecture, products, validation results, or the exact work package assigned to Safetech. Nor does it say the system will autonomously block attacks. The confirmed claim is narrower: participation in a European innovation project whose objectives include real-time detection, secure information exchange, and coordination for response organizations.

ICI Bucharest, a Romanian research and development institute and a project partner, had already described CyberINTEL-X in a May 15 announcement. It gave the same expanded project title and said the consortium was coordinated by I-ENERGYLINK. ICI’s description says the project intends to develop tools for real-time cyber-threat detection and analysis for SOCs and CSIRTs, automate incident-response, reporting and remediation processes, and establish cross-border and cross-sector cooperation for cyber-crisis management. These details independently corroborate the project’s broad operational purpose. ICI’s earlier account also referred to preparation of the grant agreement at that time; it should not be treated as evidence of the agreement’s later status.

A multinational consortium and funding context

ICI Bucharest says the consortium brings together 23 organizations from Romania, Greece, Cyprus, Belgium, the United Kingdom, Estonia, the Netherlands, the Czech Republic, Bulgaria, Slovenia, Moldova and Croatia. That 12-country list and the 23-organization count provide useful context for the company’s report of an international consortium. ICI describes planned cooperation across borders and sectors, including threat-information exchange, post-incident analysis, simulations using digital models, and support for decisions during crises. These are the institute’s descriptions of project plans, rather than evidence that such capabilities have been delivered.

At the European level, the European Cybersecurity Competence Centre (ECCC) announced on October 29 a cluster of three new projects on generative AI for cybersecurity. The ECCC said those three initiatives, supported through Horizon Europe, represented total investment of about €42 million and involved more than 70 partners. Its published list names AICYROS, AIGENTIC and GENESIS-AI. CyberINTEL-X is not one of the three projects listed in that particular cluster announcement, and the €42 million figure therefore must not be attributed to CyberINTEL-X. The ECCC source is relevant background on EU-supported AI-and-cybersecurity research, not a source for Safetech’s individual allocation or CyberINTEL-X’s budget.

Careful separation of these funding figures is important. Safetech’s report gives a company-level allocation and a grant component; it does not provide the whole consortium’s total cost. The ECCC’s €42 million relates to three other named projects. The available documents reviewed here do not support a total CyberINTEL-X budget, a full breakdown of contributions across partners, or a claim that the project is funded entirely by the EU. Readers should resist combining the numbers simply because each appears in the broader European cybersecurity funding landscape.

Why the project matters—and what remains unknown

Cyber incidents routinely cross organizational and national boundaries. A technical signal detected by one operator may matter to a supplier, a public body or a response team elsewhere; useful action can depend on sharing information in a form recipients can interpret and trust. The project descriptions therefore emphasize not just detection technology but also secure exchange, coordination, and crisis-management practices. If research produces tools that work across varied organizations, this approach could address friction between identifying a threat and coordinating a response.

That possibility is not the same as a proven result. Project objectives are goals, not outcomes. The sources reviewed do not report system performance, reductions in detection or response times, the number of operational deployments, user testing, or independent evaluation. They also do not establish what information will be exchanged, how privacy and confidentiality will be handled, or how AI-generated alerts will be reviewed by human analysts. These are reasonable questions for future technical and project updates, but unanswered questions should not be filled with assumptions.

The company-level allocation is material information about Safetech’s participation, but by itself it does not indicate the project’s likely effect on annual sales or profitability. The grant component is a funding detail, not revenue guidance. The filing provides no schedule for cash receipts, accounting treatment, milestones, commercial rights, expected product sales, or forecasts of financial impact. Any estimate of those effects would go beyond what the disclosure confirms.

Safetech’s role and investor context

Safetech Innovations is a Romanian cybersecurity company listed on the Bucharest Stock Exchange under the symbol SAFE. In this report it presents itself as a participant in a European consortium, but it does not specify whether it will lead a particular technical stream, supply a named product, or coordinate deployments. Until a work-package description or project deliverable identifies its responsibilities, its role should be described simply as participation.

SeeNews independently reported the company’s involvement on November 6, under the headline “Romania’s Safetech Innovations involved in European AI cybersecurity project.” Its page is dated 12:11:48 p.m. and the visible excerpt says Safetech shares were trading flat at 0.98 lei at 10:52 CET that Friday. That market observation is time-specific, not a measure of the project’s value or a conclusion about investor response. The company’s BVB filing remains the primary source for the participation and euro amounts; market coverage supplies independent reporting context.

For investors, the verified announcement is best read as evidence of project participation and a defined allocation, with a multi-year research horizon. It is not a contract announcement with a customer, a product launch, or a guarantee of recurring commercial income. Potential implications depend on eventual deliverables, Safetech’s precise responsibilities, project execution, and whether research outcomes are adopted or commercialized. None of those conditions is established in the filing.

What to watch next

Further company filings or project-partner updates could clarify Safetech’s technical responsibilities, milestones, and the expected timing of work. Readers can also look for public descriptions of prototypes, validation environments, participation by operational SOC and CSIRT users, and the safeguards governing threat-data exchange. Those are the kinds of details that would help distinguish planned capability from demonstrated capability.

Funding updates should be read with the same care. A future announcement might specify the grant agreement, the basis of the €643,750 allocation, or when eligible costs are recognized. Until such information appears, the confirmed financial statement remains exactly what the issuer disclosed: €643,750 allocated to Safetech’s participation, including €450,625 in non-repayable funding. No claim about total project cost or financial performance follows automatically.

The project’s public-interest relevance lies in its ambition to help European cyber-response organizations work more effectively across borders and institutions. Safetech’s disclosed participation adds a Romanian listed-company dimension to that effort. The near-term story is therefore concrete but bounded: a dated exchange filing, named programme and project, stated duration, consortium size, company allocation, and a set of intended operational goals. Whether those plans produce usable, tested improvements is a question for subsequent reporting, not a fact to presume today.

Frequently asked questions

What is CyberINTEL-X?

It is a 36-month Horizon Europe innovation project titled “From Detection to Action – The Next Generation of Operational Cybersecurity for SOCs and CSIRTs.” Its stated goals include AI-based tools and frameworks for detection, threat-information exchange and coordinated cyber-crisis management.

How much funding is allocated to Safetech?

Safetech’s November 6 current report states an allocation of €643,750 for its participation, including €450,625 in non-repayable funding. This is the company’s allocation, not the consortium’s total budget.

How many organizations are involved?

The company and ICI Bucharest both describe an international consortium of 23 partners. ICI identifies participating countries, but the sources reviewed do not provide a complete partner roster in the company’s filing.

Are CyberINTEL-X tools already deployed?

The reviewed disclosures describe objectives and planned development. They do not provide evidence that the tools are complete, deployed or independently validated.

References