The Dutch government has reopened the Mijn Cyberweerbare Zaak (My Cyber Resilient Business) subsidy. Self-employed professionals and small businesses get half of their cybersecurity measures refunded, up to €1,250 per applicant. Applications are open from 7 September to 30 November 2026.
Universal adds an offer of its own. Sign up before the closing date and you get the Provably Secure bundle (Security as a Service plus uComply) for €150 per month instead of from €299. If the subsidy is not granted, you cancel the contract free of charge.
The subsidy at a glance
- 50% of the cost of cybersecurity measures, up to €1,250 per applicant
- For self-employed professionals and SMEs with up to 50 employees and an annual turnover below €10 million, registered with the KvK
- Apply from 7 September 2026 (09:00) to 30 November 2026 (17:00) via RVO, using eHerkenning level 2+ with authorisation for RVO services
- Measures must be purchased after 7 September 2026 and eligible costs must be at least €400
- The budget is €1 million, allocated on a first come, first served basis
The scheme targets the smallest businesses in the Netherlands. Since the Dutch Cybersecurity Act came into force, exactly this group is being asked by clients, through the supply chain duty of care, to prove their security is in order.
Which measures are eligible?
RVO refunds the purchase or implementation of measures in six categories:
- Backups, so you can recover quickly after an attack or outage
- Multi-factor authentication (MFA) on accounts and systems
- A password manager for strong, unique passwords
- Updates and patch management, so known vulnerabilities are closed quickly
- Security awareness training for employees
- A risk inventory of your digital environment
The full conditions are on the RVO page for Mijn Cyberweerbare Zaak (in Dutch). Our sister organisation uComply published a detailed article: Mijn Cyberweerbare Zaak 2026: up to 1,250 euro subsidy for your cyber resilience.
Our offer: Provably Secure for €150 per month
Individual measures help, but the subsidy pays off most when you use it to set up a structural approach. That is why, during the application period, we offer the Provably Secure bundle for €150 per month. The bundle combines two services that reinforce each other:
- Security as a Service: we secure and monitor your Microsoft environment continuously. With uDefend, security incidents and recommendations are sent to you automatically. You handle the follow-up yourself, or have Universal carry it out under your support contract. Every quarter you receive a security briefing with your secure status and concrete recommendations.
- uComply: your duty of care, policy and evidence in one platform. uComply turns your security into an up-to-date audit file, including the risk inventory the subsidy scheme asks for.
One bundle therefore covers several eligible categories: MFA, patch management and a risk inventory are part of the approach, and the reporting makes the result provable to an auditor, insurer or client.
The offer conditions
- Sign up by 30 November 2026, the closing date of the subsidy scheme
- €150 per month for Security as a Service with uDefend plus uComply, instead of from €299
- Subsidy not granted? Then you cancel the contract free of charge. No risk on your side.
- We provide the invoice and the supporting documentation you need for your RVO application
Why security and proof belong together
Since 15 August 2026 the Dutch Cybersecurity Act, the national implementation of NIS2, has been in force. The law affects not only the 18 designated sectors, but through the supply chain duty of care also their suppliers. If you supply healthcare, industry, logistics, energy or government, your clients will ask for proof.
Many organisations have measures in place but cannot demonstrate them. The combination of Security as a Service and uComply solves exactly that: the security runs, and the audit file proves it. Read more on our page about the Cybersecurity Act (NIS2).
How to apply for the subsidy
- Complete the CyberVeilig Check from the Dutch National Cyber Security Centre (NCSC). The result is a mandatory attachment to your application.
- Choose your measures and sign up for the Provably Secure bundle. Note that the purchase must take place after 7 September 2026.
- Submit your application to RVO with the CyberVeilig Check result, the invoice and proof of payment. You log in with eHerkenning. Start your application on the RVO page for Mijn Cyberweerbare Zaak.
Need help with the CyberVeilig Check or the documentation for your application? We are happy to assist.
Do not wait until 30 November
The budget is allocated on a first come, first served basis. Applying early gives you the best chance of approval. Book a meeting and know where you stand within two weeks.
Want to read how the subsidy worked in 2025 first? See our earlier article on the My Cyber Resilient Business subsidy or our guide to cloud solutions for SMEs.
