FISHY · Project

Cybersecurity Platform That Protects Your Entire Supply Chain from IoT to Cloud

digitalTestedTRL 5

Imagine your business depends on a chain of connected systems — sensors in a farm, machines in a factory, trucks on the road — all talking to each other through the internet. If a hacker breaks into any link in that chain, the whole thing can collapse. FISHY built a security command center that watches over every link at once, spots weak points before attackers do, and automatically reconfigures defenses in real time. They tested it across agriculture, manufacturing, and transportation to prove it works in the real world.

By the numbers

EUR 4,999,400

EU funding for platform development

consortium partners involved

countries represented in the consortium

sector use cases validated (agriculture, manufacturing, transportation)

industry partners in the consortium

project deliverables produced

67%

industry participation ratio

The business problem

What needed solving

Businesses today run on interconnected digital supply chains — IoT sensors, edge devices, cloud platforms, and networks all linked together. A cyberattack on any single link can cascade through the entire chain, causing downtime, data breaches, and financial losses. Most cybersecurity tools protect individual systems but leave dangerous gaps between the links in the chain.

The solution

What was built

The project built a Proof-of-Concept cybersecurity platform that orchestrates security across entire ICT supply chains — from IoT devices through edge and cloud to networking infrastructure. It includes AI-powered vulnerability forecasting, intent-based security orchestration, and distributed ledger technology for accountability. The team produced 20 deliverables including validated use case demonstrators across agriculture, manufacturing, and transportation sectors.

Audience

Who needs this

AgriTech companies with connected farming systems and IoT sensor networksManufacturers with Industry 4.0 connected production lines and digital supply chainsLogistics and fleet management companies with connected vehicle trackingManaged security service providers (MSSPs) looking for supply chain security offeringsCritical infrastructure operators needing end-to-end cyber resilience

Business applications

Who can put this to work

Agriculture & AgriTech

mid-size

Target: Smart farming companies using IoT sensors and connected equipment

If you are a smart farming operation dealing with connected sensors, automated irrigation, and remote monitoring systems that are vulnerable to cyberattacks — this project developed a security platform tested in agricultural use cases that monitors your entire IoT chain end-to-end and automatically responds to threats in real time. The platform was validated with 15 consortium partners across 7 countries.

Manufacturing & Industry 4.0

enterprise

Target: Manufacturers with connected production lines and supply chain dependencies

If you are a manufacturer dealing with cybersecurity risks across your connected production line and digital supply chain — this project developed a Proof-of-Concept platform that orchestrates security across your IoT devices, edge computing, and cloud infrastructure. It was built with 10 industry partners and specifically demonstrated in manufacturing use cases.

Logistics & Transportation

enterprise

Target: Logistics companies with connected fleet and cargo tracking systems

If you are a logistics company dealing with cyber threats across your connected fleet, cargo tracking, and supply chain IT systems — this project developed a platform that uses AI and data analytics to forecast vulnerabilities and orchestrate defenses automatically. It was validated in a transportation use case as one of 3 sector demonstrations.

Frequently asked

Quick answers

What would it cost to implement this kind of supply chain cybersecurity platform?

The FISHY platform was developed with EUR 4,999,400 in EU funding across 15 partners over 3 years. As a Proof-of-Concept, commercial pricing is not yet established. Any deployment would require customization and integration work beyond the current PoC stage.

Can this scale to protect a large enterprise supply chain?

The platform was designed to handle complex, distributed ICT infrastructures spanning IoT devices, edge computing, cloud, and networking layers end-to-end. It was validated across 3 different sector use cases (agriculture, manufacturing, transportation), showing adaptability. However, scaling from PoC to enterprise production would require further engineering.

Who owns the technology and can I license it?

The project was coordinated by ATOS SPAIN SA, a major IT services company, with 15 partners across 7 countries. As an EU-funded RIA project, IP is typically shared among consortium members. Contact the coordinator to discuss licensing or partnership options.

How does this differ from existing cybersecurity solutions?

Unlike traditional security tools that protect individual systems, FISHY orchestrates security across the entire supply chain — from IoT sensors through edge and cloud to network infrastructure. It uses AI-driven vulnerability forecasting and intent-based security orchestration to automatically reconfigure defenses, rather than just detecting threats after the fact.

Has this been tested in real conditions?

The project produced 20 deliverables including use case demonstrators with developed vertical applications and corresponding test reports. Three sector-specific use cases (agriculture, manufacturing, transportation) were implemented and validated. The final release deliverable confirmed validated demonstrators.

What about data privacy and compliance?

Privacy was a core design concern listed among the project's key focus areas. The platform includes accountability features and evidence-based security assurance, which can support regulatory compliance. Sensitive data handling was carefully managed even within the consortium, with restricted annexes for sensitive use case information.

Consortium

Who built it

The FISHY consortium is heavily industry-oriented at 67% (10 out of 15 partners), which is a strong signal that this technology was built with commercial deployment in mind. The coordinator, ATOS SPAIN SA, is a major European IT services company — not a university lab — meaning the platform was engineered to industry standards. With 5 universities providing research depth and 3 SMEs bringing agility, the mix is well-suited for technology that needs to move from research to market. The 7-country spread (Spain, Germany, Italy, Portugal, Greece, Switzerland, Slovenia) gives the solution a pan-European perspective on supply chain security challenges.

ATOS SPAIN SACoordinator · ES
UNIVERSIDADE DO MINHOparticipant · PT
XLAB RAZVOJ PROGRAMSKE OPREME IN SVETOVANJE DOOparticipant · SI
MC SHARED SERVICES SAparticipant · PT
ENTERSOFT ANONYMI ETAIREIA PARAGOGIS KAI EMPORIAS LOGISMIKOU KAI IPIRESIONparticipant · EL
SYNELIXIS LYSEIS PLIROFORIKIS AUTOMATISMOU & TILEPIKOINONION ANONIMI ETAIRIAparticipant · EL
TECHNISCHE UNIVERSITAET BRAUNSCHWEIGparticipant · DE
UNIVERSITAT POLITECNICA DE CATALUNYAparticipant · ES
TELEFONICA INNOVACION DIGITAL SLparticipant · ES
POLITECNICO DI TORINOparticipant · IT
CAPGEMINI ESPANA SLparticipant · ES
SPHYNX TECHNOLOGY SOLUTIONS AGparticipant · CH
ATOS IT SOLUTIONS AND SERVICES IBERIA SLthirdparty · ES
UNIVERSIDAD CARLOS III DE MADRIDthirdparty · ES

How to reach the team

ATOS SPAIN SA coordinated this project. As a major IT services provider, they likely have a dedicated innovation or partnerships team handling follow-up inquiries.

Order a report on this consortium See ATOS SPAIN SA profile →

Next steps

Talk to the team behind this work.

Want to explore how FISHY's supply chain cybersecurity platform could protect your business? SciTransfer can connect you with the right team members and help assess fit for your specific use case.

Order a report on this topic More in Digital & ICT