Key data
| Regulation | Resolution 420/38329/2026, of July 14, from the General Technical Secretariat — Agreement between INTA and S2 Grupo Soluciones de Seguridad, SLU |
|---|---|
| BOE Publication | July 20, 2026 |
| Entry into force | July 9, 2026 |
| Signatory parties | National Institute of Aerospace Technology «Esteban Terradas» (INTA) and S2 Grupo Soluciones de Seguridad, SLU |
| Scope | Cybersecurity and cyber defense — R&D&i, audits, cyber ranges, artificial intelligence |
| Planned financing | Horizon Europe, European Defence Fund and own or external financing per activity |
| Category | Public Sector |
| Immediate direct expenditure | None — enabling framework for future collaborations |
Cybersecurity and defense companies in Spain have a new public-private collaboration framework on the table. The Resolution 420/38329/2026, published in the BOE on July 20, 2026, formalizes the agreement between INTA and S2 Grupo Soluciones de Seguridad, SLU. The agreement entered into force on July 9, 2026 and does not imply direct economic commitments: it is an enabling framework that defines the rules of the game for future collaborations with own or external financing.
The key for the private sector lies in the possibility of integrating into consortiums led by these entities to access calls from Horizon Europe and the European Defence Fund, two of the largest R&D&i financing instruments in defense at the European level.
What does this regulation establish?
The agreement is a framework agreement: it does not execute specific projects by itself, but rather establishes the conditions under which INTA and S2 Grupo may collaborate. Each specific activity will require a specific agreement or contract that defines scope, resources and financing.
The areas of collaboration provided for in the agreement are:
| Area of collaboration | Description |
|---|---|
| R&D&i projects in cybersecurity | Joint research and development in the field of cybersecurity and cyber defense |
| Technical audits | Conducting security audits on systems and infrastructure |
| Vulnerability analysis | Identification and assessment of vulnerabilities in critical environments |
| Artificial intelligence applied to threats | Use of AI for detection, analysis and response to cyber threats |
| Advanced simulation | Exercises and simulations of cyber attack scenarios |
| Cyber ranges operation | Management and operation of cybersecurity training environments |
| Consortiums for European financing | Formation of consortiums to apply for Horizon Europe and European Defence Fund |
The agreement also creates a Joint Monitoring Commission with minimum annual meetings, responsible for overseeing compliance and the evolution of collaborations.
Economic and operational impact
The agreement does not generate direct costs for either party at this time. Its economic value is potential: it opens access to national and international public financing that would otherwise be difficult to obtain for a private company acting alone.
- Horizon Europe is the EU's main R&D&i program, with a total budget of 95.5 billion euros for the 2021-2027 period. Cybersecurity and defense projects compete in specific calls with co-financing rates of up to 100% for public entities and up to 70% for private companies in some instruments.
- European Defence Fund (EDF) has approximately 8 billion euros for the same period, intended exclusively for R&D in defense. Participating in a consortium with INTA — a body of the Ministry of Defense — significantly strengthens applications.
- Each specific project activated under this agreement will require its own budget, defined in the corresponding specific agreement.
From an operational standpoint, the agreement implies that S2 Grupo will be able to access INTA's infrastructure and capabilities (including cyber ranges and simulation environments) and that INTA will be able to benefit from S2 Grupo's private technical expertise in audits and threat analysis.
Who does it affect?
- INTA — autonomous body of the Ministry of Defense, direct signatory party.
- S2 Grupo Soluciones de Seguridad, SLU — private cybersecurity company, direct signatory party.
- Cybersecurity sector companies that regularly collaborate with INTA or S2 Grupo and can be integrated into future consortiums.
- Defense sector companies with capabilities in vulnerability analysis, simulation or artificial intelligence applied to threats.
- Consulting firms and technology providers that aspire to participate in projects financed by Horizon Europe or the European Defence Fund through consortiums led by these entities.
- Public bodies and research centers interested in collaborating with INTA in the field of cyber defense.
Practical example
A medium-sized company specializing in vulnerability analysis regularly works with S2 Grupo as a subcontractor. Thanks to this agreement, S2 Grupo can now propose that company as a technology partner in a consortium with INTA to apply for a call from the European Defence Fund.
The consortium — made up of INTA (public defense entity), S2 Grupo (private cybersecurity company) and the subcontracting company (technical specialist) — meets the usual requirements of European programs, which require participation of at least three entities from different countries or of mixed public-private nature. The specific agreement signed for that particular project will define the budget, the division of tasks and the financing allocated to each party.
Without this framework agreement, the subcontracting company would have had difficulty accessing that type of call on its own.
What should companies do now?
- Evaluate whether your company has capabilities aligned with any of the agreement's areas: technical audits, vulnerability analysis, AI applied to threats, advanced simulation or cyber ranges operation.
- Contact S2 Grupo or INTA if you already have a commercial or technical relationship with either of the two entities, to explore whether you can be integrated into future consortiums under this framework.
- Monitor Horizon Europe and European Defence Fund calls relevant to your sector: the agreement is specifically designed to facilitate participation in these calls.
- Prepare your consortium profile: document your technical capabilities, previous projects and cybersecurity certifications so you can respond quickly when a specific call is activated.
- Review the specific agreements that derive from this framework agreement: each project will have its own contract with scope, resources and financing defined, and that is where the real economic commitments will be.
Frequently asked questions
What exactly is the INTA–S2 Grupo agreement and what does it imply?
It is a framework collaboration agreement in cybersecurity and cyber defense signed between the National Institute of Aerospace Technology «Esteban Terradas» (INTA), an autonomous body of the Ministry of Defense, and S2 Grupo Soluciones de Seguridad, SLU. It does not imply immediate direct expenditure: it is an enabling framework that allows both parties to collaborate on R&D&i projects, technical audits, vulnerability analysis, AI applied to threats, advanced simulation and cyber ranges operation, as well as form consortiums to apply for European financing.
When does the INTA–S2 Grupo agreement enter into force?
The agreement entered into force on July 9, 2026, although its publication in the BOE took place on July 20, 2026, through Resolution 420/38329/2026 of the General Technical Secretariat.
Can my company participate in projects derived from this agreement?
Yes, indirectly. The agreement allows INTA and S2 Grupo to form consortiums with third entities to apply for national and international public financing, including Horizon Europe and the European Defence Fund. If your company has capabilities in cybersecurity or cyber defense and maintains a relationship with either of the two parties, it can be integrated into those consortiums through the specific agreements signed for each particular project.
What European funds can be applied for under this agreement?
The agreement expressly mentions two instruments: Horizon Europe, the EU's main R&D&i program with 95.5 billion euros for 2021-2027, and the European Defence Fund (EDF), with approximately 8 billion euros for the same period, intended exclusively for R&D in defense. Both require consortiums with participation from several entities, which makes this type of framework agreement especially relevant.
How does the Joint Monitoring Commission of the agreement work?
The agreement creates a Joint Monitoring Commission made up of representatives from both parties (INTA and S2 Grupo), with minimum annual meetings. Its function is to oversee compliance with the agreement and the evolution of collaborations activated under its umbrella. It has no executive functions over specific projects, which are managed through specific agreements or contracts.
Official source
Consult complete regulation in official source
Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-15817