Skip to main content
Go to the home page of the European Commission (opens in new window)
English en
CORDIS - EU research results
CORDIS

An Integrated Toolkit for Secure Software Development

Objective

Modern software systems continue to suffer from costly and dangerous security vulnerabilities, while the current best practices, based on testing, audits, and frequent security updates, remain fragmented, reactive, and ineffective in finding and fixing subtle security bugs. Formal verification has emerged as a powerful research-driven technique that can provide stronger guarantees but is still too expensive for use in most software projects.

Spectrum seeks to break through this impasse by creating the first Integrated Development and Verification Environment (IDVE) that unifies software verification tools, deep security analysis, and specification-based testing within standard software development workflows, enabling developers to find and fix security-critical bugs early in the software lifecycle.

The core research ideas behind Spectrum were developed in two ERC projects, culminating in the ERC Proof-of-Concept CRYSPEN (101069446), which produced the Hax open-source toolchain for formally verifying Rust software. While Hax proves the feasibility of our approach, using it on industrial software still requires significant manual effort and verification expertise. Spectrum transforms this research methodology into a scalable, developer-friendly product by integrating intelligent, automated tools within a familiar development environment that any team can easily adopt.

In this project, Cryspen will build Spectrum and demonstrate it at existing clients, achieving TRL6. In parallel, Cryspen will execute business activities including structured market analysis, customer validation through pilots and surveys, and the preparation of an investor-ready business plan with clear go-to-market and pricing strategies. Demonstrations with clients that include SMEs, big tech, and government agencies will showcase Spectrum’s commercial potential and support early adoption, positioning Cryspen as a product-led deep-tech company ready to scale Spectrum globally.

Fields of science (EuroSciVoc)

CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: The European Science Vocabulary.

You need to log in or register to use this function

Keywords

Project’s keywords as indicated by the project coordinator. Not to be confused with the EuroSciVoc taxonomy (Fields of science)

Programme(s)

Multi-annual funding programmes that define the EU’s priorities for research and innovation.

Topic(s)

Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.

Funding Scheme

Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.

HORIZON-EIC - HORIZON EIC Grants

See all projects funded under this funding scheme

Call for proposal

Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.

(opens in new window) HORIZON-EIC-2025-TRANSITIONOPEN

See all projects funded under this call

Coordinator

Cryspen SARL
Net EU contribution

Net EU financial contribution. The sum of money that the participant receives, deducted by the EU contribution to its linked third party. It considers the distribution of the EU financial contribution between direct beneficiaries of the project and other types of participants, like third-party participants.

€ 2 432 017,50
Address
149 avenue du maine
75014 Paris
France

See on map

SME

The organization defined itself as SME (small and medium-sized enterprise) at the time the Grant Agreement was signed.

Yes
Region
Ile-de-France Ile-de-France Paris
Activity type
Private for-profit entities (excluding Higher or Secondary Education Establishments)
Links
Total cost

The total costs incurred by this organisation to participate in the project, including direct and indirect costs. This amount is a subset of the overall project budget.

No data