Tech··3 min
SME cybersecurity: free test, LHC pre-analysis and €17,500 in support
A three-step pathway from the Luxembourg House of Cybersecurity lets Luxembourg SMEs test their cyber maturity for free, then fund up to €17,500 of upgrades, including work to meet NIS2 requirements.
Translated from French · Lire l'original en français
Any Luxembourg SME can now assess its cyber maturity for free in fifteen minutes. If its score is low, or if it has to comply with NIS2, it can then get up to €17,500 to fund an upgrade through the Luxembourg House of Cybersecurity (LHC).
The Fit4Cybersecurity test: the first step before any investment
Before committing any budget, start with Fit4Cybersecurity, a tool developed by the NC3 and hosted by the Luxembourg House of Cybersecurity. The self-assessment questionnaire is free and anonymous, and takes about fifteen minutes to complete, according to nc3.lu. If your company is based in Luxembourg and scores 65 out of 100 or more, you are offered a free diagnostic carried out directly by an NC3 expert. This gives you an objective view of your weak points before you look for funding.
The NC3, also through the LHC, provides MONARC, an open source risk analysis method that is also available as SaaS and aligned with the ISO/IEC 27005 standard. It complements the initial self-assessment for companies that want to go further.
The LHC pre-analysis: a required step before any funding
If the test reveals gaps, or if your business falls within the scope of NIS2, the next step is not to contact the LHC directly for a quote. According to the guichet.public.lu information page, any funding application must first go through a pre-analysis by the Luxembourg House of Cybersecurity, carried out via the Chambre de Commerce's House of Entrepreneurship or via Cybersecurity eHandwierk for businesses that come under the Chambre des Métiers (Chamber of Skilled Crafts). Access to the grant scheme depends on this pre-analysis.
The LHC itself is listed on guichet.public.lu as an official body for businesses, with its contact address: 122, rue Adolphe Fischer, L-1521 Luxembourg.
The SME Package Cybersecurity: up to €17,500 reimbursed once the work is done
Once the pre-analysis is complete, the SME can submit an SME Package Cybersecurity application. The scheme covers 70% of an upgrade service costing between €3,000 and €25,000 excl. VAT, capped at €17,500 and paid after the work has been carried out, according to the guichet.public.lu information page updated on 11 March 2025.
| Criterion | Details |
|---|---|
| Eligible service amount | €3,000 to €25,000 excl. VAT |
| Grant rate | 70% |
| Maximum grant | €17,500 |
| Payment | After the work has been carried out |
- Hold a business permit and have a registered office in Luxembourg
- Have completed the required LHC pre-analysis via the House of Entrepreneurship or Cybersecurity eHandwierk
- Plan an upgrade service costed between €3,000 and €25,000 excl. VAT
Guichet.public.lu states that the scheme notably funds compliance with the NIS2 directive, which makes it a direct lever for companies subject to this regulatory requirement. To check whether your business is in scope, see our article on NIS2 in Luxembourg.
A State that wants to move faster: a national “Fabrique” (“Factory”) announced
On 21 August 2026, the Luxembourg House of Cybersecurity announced the launch of a State-backed national cybersecurity “Fabrique” (“Factory”), according to Paperjam. Pascal Steichen, CEO of the LHC, mentions a budget in the order of tens of millions of euros, a figure still to be confirmed in early 2026; no final amount has been made official at this stage. It signals that public authorities intend to step up their investment in cyber support for businesses, beyond the SME Package alone.
Until the details of this new scheme are known, the test, pre-analysis, funding pathway remains the most practical entry point for an SME that wants to make progress on its cybersecurity without waiting. Further reading on this topic: A four-week cybersecurity plan.
