CYTRIX
Discuss fit
HORIZON-CL3-2026-02-CS-ECCC-01 · TECHNOLOGY & R&D PARTNER

AI-Assisted Software Supply Chain Risk & Regulatory Assurance

From software-security findings to accountable risk, remediation and regulatory decisions.

Cytrix and ACCA5 SA combine working cybersecurity platforms, advanced risk methodologies and hybrid deterministic/AI reasoning to connect software-security findings with risk, VEX, CRA obligations and verifiable evidence.

Discuss consortium fit We are looking to join an existing ECCC-01 consortium as Technology Provider / R&D Partner. We are not seeking consortium coordination.
Assurance flow

A decision layer between findings and accountable action.

Software / SBOM / Dependencies
Security Findings
AI Context
Exploitability & Risk
VEX / Remediation
CRA Requirements
Evidence & Continuous Assurance

Not another vulnerability scanner — the decision and assurance layer between technical findings and accountable action.

Complementary organisations

Working platforms, risk methodologies and explainable decision support.

CYTRIX S.R.L. · ITALY

Software Security & Continuous Assurance

Existing proprietary platforms for software-security assurance, Cyber Resilience Act lifecycle management, regulatory reasoning and continuous evidence.

CRA PlatformSBOM · CVE · VEX · vulnerability lifecycle · CRA workflows · technical evidence
AlterEgorequirements · risk · controls · evidence · regulatory reasoning · continuous assurance
IntelliAgentsAI/LLM reasoning · deterministic controls · agentic workflows · provenance
Existing Cytrix Background IP
ACCA5 SA · SWITZERLAND

Risk, Governance & Digital Trust

Governance, Risk, Compliance & Digital Trust expertise combined with proprietary risk-analysis methodologies and advanced technology research.

  • proprietary risk-analysis methodologies
  • filed patent applications relating to risk analysis
  • contextual and quantitative risk modelling
  • governance and decision-support methodologies
  • AI-assisted security-risk reasoning
  • explainability and decision traceability
  • hybrid deterministic / probabilistic research
  • local high-performance AI processing for sensitive security information
Existing ACCA5 Background IP acca5.ch
Technology contribution

A clearly delimited technology contribution

Designed to integrate with an existing consortium architecture rather than replace it.

Contextual Vulnerability Analysis

Enrich vulnerabilities with asset, dependency, exposure, operational and business context.

Exploitability & Risk Reasoning

Translate technical findings into contextual risk and remediation priority.

VEX Automation

Support evidence-based VEX decisions with traceable justification.

CRA & Security Mapping

Connect security findings with applicable CRA and security requirements.

Continuous Evidence

Preserve evidence, provenance and decision history for continuous assurance.

Deterministic Validation of AI

Use deterministic checks where security conclusions must remain reproducible and auditable.

CI/CDGit repositoriesSASTDASTSCASBOM platformsvulnerability scannersthreat intelligenceAPIs
Hybrid reasoning

Deterministic where it must be. Intelligent where it needs to be.

Security and regulatory decisions need contextual intelligence without sacrificing reproducibility, traceability and control.

Deterministic layer

  • rules
  • policy enforcement
  • validation
  • reproducibility
  • auditability
Verifiable
Decision

Cognitive / AI layer

  • contextual interpretation
  • complex correlation
  • reasoning
  • prioritisation
  • decision support
Consortium relevance

Why this matters to a consortium

Working technology

Existing platforms and APIs are available as project background. The consortium does not need to wait for us to build the foundation from zero.

Complementary IP

Cytrix brings software-security and regulatory-assurance technology. ACCA5 contributes proprietary risk methodologies and filed patent applications.

Integration-first

We can contribute a bounded component through APIs and defined interfaces, minimising disruption to an existing consortium architecture.

Local AI capability

Sensitive source code and security information can be processed using local high-performance AI infrastructure where required.

Background / Results / IP

Clear IP boundaries

BG

Background

Existing Cytrix platforms, software, architecture and know-how remain Cytrix IP. Existing ACCA5 methodologies, know-how and filed patent applications remain ACCA5 IP.

PR

Project Results

New project results can be allocated according to the entity generating them and the consortium agreement, using clear component interfaces to reduce unnecessary joint ownership.

CONSORTIUM ROLE

Technology Provider / R&D Partner

We are looking to join an existing or advanced ECCC-01 proposal, particularly in Software Supply Chain Security, Secure SDLC, AI-assisted security assessment, vulnerability management, security-by-design, provenance and continuous assurance.

We are not seeking to coordinate the consortium.

Cytrix · ItalyACCA5 SA · Switzerland
Discuss consortium fit Download 1-page partner profile
Deadline · 15 September 2026