KASPERSKY LAB UK LTD

Their core work

Kaspersky Lab UK is the British entity of the globally recognised cybersecurity vendor Kaspersky, bringing commercial-grade threat intelligence and security technology into EU-funded research consortia. In H2020 they contributed to both advanced security architecture projects — specifically adaptive MILS-based critical infrastructure protection — and operationally focused public-sector cyber defense, including real-time threat monitoring and security awareness training. Their value to research projects lies in bridging the gap between academic security research and production-ready commercial tooling: they know what attackers actually do, and they can validate research solutions against real threat landscapes. Within consortia they act as an industry anchor, providing threat intelligence feeds, security product expertise, and end-user validation that academic partners typically cannot supply.

What they specialise in

How they've shifted over time

In their first H2020 project (CITADEL, 2016), Kaspersky's contribution centred on deep technical security architecture: MILS (Multiple Independent Levels of Security), adaptive self-healing systems, dynamic reconfiguration, and formal compositional assurance — highly specialist, engineering-level work aimed at hardening critical infrastructure. By their second project (COMPACT, 2017), the focus shifted toward operational and human-centric security: real-time monitoring dashboards, information sharing between organisations, risk assessment frameworks, and security awareness training delivered through gamification. This trajectory mirrors a broader industry shift — from building secure systems by design, toward managing the human and organisational layer of security that technical controls alone cannot solve.

Kaspersky UK is moving from back-end security engineering toward front-line cyber resilience for public institutions — a direction that aligns with EU policy priorities around NIS2 compliance and public administration cyber capacity, making them a relevant partner for projects in those areas.

How they like to work

Kaspersky Lab UK participated exclusively as a consortium partner in both projects — never taking on the coordinator role — which is consistent with a large commercial vendor joining research projects to provide industry validation and commercial technology rather than to lead academic research programmes. Their 30 unique partners across 12 countries in just 2 projects suggests they joined large, multi-partner Innovation Actions where their brand and product expertise offered credibility to the consortium. Working with them means gaining access to a globally recognised cybersecurity vendor's threat intelligence and commercial toolchain, but they are unlikely to drive the research agenda or shoulder administrative project management.

Despite only two projects, Kaspersky Lab UK connected with 30 unique consortium partners spanning 12 countries — a wide network footprint for such limited H2020 activity, reflecting the large multi-partner structure of both Innovation Actions they joined. Their collaboration geography is pan-European with no single country dominating.

What sets them apart

Kaspersky Lab UK is the only globally scaled commercial cybersecurity vendor in this dataset, which means they bring something most university or SME partners simply cannot: a live commercial threat intelligence operation, a global customer base from which attack patterns are observed, and security products already deployed at scale. For any consortium building a security research project that needs to demonstrate industry relevance and a path to commercial exploitation, Kaspersky's name and toolset are a significant asset. The trade-off is that their H2020 footprint is small (2 projects, no coordinator experience), so they should be treated as a specialist industry contributor rather than an experienced EU project manager.

Highlights from their portfolio

• CITADEL
  The only funded project (EUR 162,112) and technically the most ambitious — applying formal MILS architecture and adaptive self-healing to critical infrastructure, placing Kaspersky in a core engineering role alongside academic security researchers.
• COMPACT
  Demonstrates Kaspersky's willingness to address the human and organisational dimension of cybersecurity alongside their technical product work, targeting local public administrations — a politically visible and EU-policy-relevant user group.