EnergyShield · Project

Cybersecurity Toolkit That Protects Power Grids from Hackers and DDoS Attacks

energyPilotedTRL 7

Imagine your entire electricity grid — from the power plant to your home meter — is one giant computer network. Hackers can attack any point along that chain to cause blackouts or steal data. EnergyShield built a security toolkit that watches over the whole energy chain at once, spots unusual behavior before an attack succeeds, and blocks threats like DDoS floods that try to knock systems offline. Think of it as a burglar alarm, security camera, and lock system all wired together for the power grid.

By the numbers

consortium partners

countries represented

end-users validating the toolkit

industry partners in consortium

SMEs in consortium

total deliverables produced

57%

industry ratio in consortium

The business problem

What needed solving

Power grids are increasingly digital and connected, making them prime targets for cyberattacks — from DDoS floods that knock out control systems to sophisticated intrusions that exploit software vulnerabilities. Energy operators currently lack integrated security tools that cover the entire chain from generator to consumer, leaving blind spots that attackers exploit. Most existing cybersecurity solutions weren't built for the specific architecture and protocols of electrical power and energy systems.

The solution

What was built

An integrated cybersecurity toolkit covering vulnerability assessment (automated threat modelling, security behavior analysis), monitoring and protection (anomaly detection, DDoS mitigation), and learning and sharing (SIEM). Also delivered an updated security culture tool for planning and implementing staff security awareness programs, iterated through multiple versions. The toolkit was validated in large-scale demonstrations with 7 energy end-users across 18 total deliverables.

Audience

Who needs this

Transmission system operators (TSOs) needing grid-wide cyber protectionDistribution system operators (DSOs) managing smart grid rolloutsPower plant operators securing generation infrastructureManaged security service providers expanding into energy OTNational energy regulators enforcing NIS2 compliance

Business applications

Who can put this to work

Electric Utilities & Grid Operators

enterprise

Target: Transmission and distribution system operators (TSOs/DSOs)

If you are a grid operator dealing with rising cyber threats to your control systems — this project developed an integrated toolkit combining vulnerability scanning, automated threat modelling, anomaly detection, and DDoS mitigation that was validated in large-scale demonstrations with 7 end-users across the energy value chain. The toolkit covers generator, TSO, DSO, and consumer segments, giving you visibility across your entire infrastructure.

Industrial Cybersecurity Services

mid-size

Target: Managed security service providers (MSSPs) serving critical infrastructure

If you are a cybersecurity firm looking to expand into the energy sector — this project created technology building blocks for vulnerability assessment, SIEM, and anomaly detection specifically tailored for electrical power systems. The consortium included 6 innovative SMEs and 2 large industrial partners, and many of these building blocks are transferable to other critical infrastructure sectors beyond energy.

Power Generation & Renewables

any

Target: Power plant operators and renewable energy companies

If you are a power generator worried about cyberattacks disrupting your operations — this project built automated threat modelling that identifies weak links in your architecture and predicts future attacks. The security culture tool helps you train staff and implement security programs, addressing the human factor that causes most breaches. The toolkit was tested with real end-users representing various parts of the energy value chain.

Frequently asked

Quick answers

What would this cost to implement?

Budget details are not available in the dataset. However, the toolkit was built by a consortium led by an SME (SIVECO) with 6 other innovative SMEs, suggesting the tools are designed to be commercially viable and not just academic exercises. Contact the coordinator for licensing and pricing details.

Can this work at industrial scale for a national grid?

Yes — the toolkit was specifically designed to cover the complete EPES value chain from generator to consumer, including TSOs and DSOs. It was validated in large-scale demonstrations by 7 end-users representing various parts of the energy chain across 10 countries.

Who owns the intellectual property and how is it licensed?

The project was led by SOFTWARE IMAGINATION AND VISION SRL (SIVECO, Romania), a private SME. As an Innovation Action with 13 industry partners and 11 SMEs, IP is likely distributed among the technology providers. Contact the consortium partners directly for licensing terms.

Does this meet energy sector cybersecurity regulations like NIS2?

The toolkit addresses core requirements of energy cybersecurity regulation: vulnerability assessment, incident detection, DDoS protection, and security information management (SIEM). While the project ran from 2019-2022, before NIS2 enforcement, the capabilities align with what NIS2 demands from essential energy services.

How long would it take to deploy?

The project ran for 3 years (2019-2022) from development through large-scale demonstration. Based on available project data, the toolkit reached validation stage with real end-users, suggesting individual components could be deployed in months rather than years for organizations ready to adopt.

Can this integrate with our existing SCADA and OT systems?

The toolkit was designed for the complete energy value chain and validated with 7 real end-users operating actual infrastructure. The integrative approach combines insights from vulnerability scanning, threat modelling, anomaly detection, and SIEM into a unified view, suggesting it was built to work alongside existing operational technology.

Is post-project support available?

The coordinator SIVECO (SOFTWARE IMAGINATION AND VISION SRL) is an established Romanian software company and SME. The consortium included 2 large industrial partners (SIVECO and PSI) likely to continue commercializing the results. Check the project website energy-shield.eu for current availability.

Consortium

Who built it

This is a commercially serious consortium with 23 partners across 10 countries and a 57% industry ratio — well above academic-heavy projects. Led by SIVECO (Romania), a private SME, alongside PSI as the second large industrial partner, plus 6 innovative SMEs building the technology. The 7 end-users are actual energy operators who tested the toolkit on real infrastructure, not just lab simulations. With 3 universities providing research support and 13 industry players driving development, this consortium was structured to produce deployable products, not just papers. The geographic spread across Bulgaria, Germany, Greece, Ireland, Israel, Italy, Luxembourg, Romania, Sweden, and the UK gives the toolkit exposure to diverse regulatory environments and grid architectures.

SOFTWARE IMAGINATION AND VISION SRLCoordinator · RO
TECH INSPIRE LTDparticipant · UK
ELEKTROENERGIEN SISTEMEN OPERATOR EADparticipant · BG
CSP INNOVAZIONE NELLE ICT SCARLthirdparty · IT
MVETS LENISHTA OODparticipant · BG
DIL DIELparticipant · BG
KUNGLIGA TEKNISKA HOEGSKOLANparticipant · SE
SI-GA DATA SECURITY (2014) LTDparticipant · IL
ELECTRODISTRIBUTION GRID WEST ADparticipant · BG
ETHNICON METSOVION POLYTECHNIONparticipant · EL
CITY ST GEORGES UNIVERSITY OF LONDONparticipant · UK
EUROSOFT DEVELOPMENT SAparticipant · RO
SOFTWARE COMPANY EOODparticipant · BG
KOGEN ZAGORE EOODparticipant · BG
IREN SPAparticipant · IT
MIG 23 LTDparticipant · BG
IRETI SPAthirdparty · IT
L7 DEFENSE LUXEMBOURG SARLparticipant · LU
KONNEKT ABLE TECHNOLOGIES LIMITEDparticipant · IE
FORESEETI ABparticipant · SE

How to reach the team

SOFTWARE IMAGINATION AND VISION SRL (SIVECO), Romania — use SciTransfer's matchmaking service for a warm introduction to the right technical contact

Order a report on this consortium See SOFTWARE IMAGINATION AND VISION SRL profile →

Next steps

Talk to the team behind this work.

Want to connect with the EnergyShield team to explore licensing or deployment? SciTransfer can arrange an introduction to the coordinator and relevant technology partners. Contact us for a one-page brief with full details.

Order a report on this topic More in Energy & Climate