In short
- What: the Mijn Cyberweerbare Zaak (MCZ) subsidy from the Netherlands Enterprise Agency (RVO).
- How much: 50% of the costs, up to a maximum of 1,250 euro in subsidy per applicant.
- For whom: sole traders and SMEs registered with the Dutch Chamber of Commerce (KvK), with a maximum of 50 employees and an annual turnover below 10 million euro.
- When: you can apply from 7 September until 30 November 2026, on a first-come, first-served basis (until the budget runs out).
- Where: directly with RVO at rvo.nl.
Cyberattacks hit small and medium-sized businesses in particular, because their security is often thinner than at large organisations. With Mijn Cyberweerbare Zaak, the government pays half of your investment in cyber resilience. In this article you will read exactly how much you receive, who the scheme applies to, what you may spend it on and how to apply.
What is Mijn Cyberweerbare Zaak?
Mijn Cyberweerbare Zaak is a government subsidy scheme (run by RVO, in cooperation with the National Cyber Security Centre) that helps small businesses strengthen their digital resilience. You purchase or implement one or more concrete security measures and get half of the cost reimbursed. For 2026 a total of 1 million euro is available.
How much subsidy do you receive?
You get back 50% of the costs of the purchase or implementation, up to a maximum of 1,250 euro in subsidy per applicant. So you contribute at least the same amount yourself (co-financing). A multi-year subscription is reimbursed for a maximum of one year.
Who is the subsidy for?
You qualify if your business meets these conditions:
- registered with the Dutch Chamber of Commerce (KvK);
- a maximum of 50 employees;
- an annual turnover of less than 10 million euro in the last financial year.
Sole traders (zzp'ers) are also covered by the scheme.
What can you use the subsidy for? The 8 measures
The subsidy applies to eight recognised cyber resilience measures. For each measure, here is how ZETA can help:
- Secure network access and wifi, for example a proper firewall and network segmentation. See our Managed Firewall and network resilience.
- Two-factor or multi-factor authentication (2FA/MFA). Fits a Zero Trust approach.
- Antivirus and endpoint protection. See Endpoint Security.
- Setting up and testing backups. See our backup solution.
- Risk assessment and evaluation. Start with a security scan.
- Cyber awareness training for your staff. See Security Awareness and phishing simulations.
- Patch management, so software is updated on time. Part of Managed IT.
- A password manager for strong, unique passwords.
The conditions and the deadline
- You can apply from 7 September until 30 November 2026.
- The budget is limited (1 million euro) and is allocated on a first-come, first-served basis, so do not wait too long.
- Only measures you purchase or implement from 7 September 2026 onwards count. Measures paid for or implemented earlier are not reimbursed.
- A multi-year subscription is reimbursed for a maximum of one year.
How to apply
- Choose which measure(s) you want to take and request a quote.
- Purchase the measure or have it implemented (from 7 September 2026).
- Submit your application to RVO at rvo.nl, with the invoice and proof of payment.
- RVO assesses your application and pays out the subsidy.
How ZETA helps you
We are happy to think along with you about which measure delivers the most for your situation, and we provide a clear quote and invoice that you can use for your application. That way you get the most out of the scheme and your business is genuinely better protected afterwards. Curious whether you qualify? Take the free subsidy check below.
Frequently asked questions
How much subsidy can I get?
50% of the costs, up to a maximum of 1,250 euro in subsidy per applicant. You pay the other half yourself.
Until when can I apply?
Until 30 November 2026, or earlier if the 1 million euro budget runs out. Applications are handled on a first-come, first-served basis.
Do I qualify as a sole trader?
Yes. Sole traders and SMEs with up to 50 employees and an annual turnover below 10 million euro, registered with the KvK, qualify.
What may I spend the money on?
On eight recognised measures, such as a firewall, two-factor authentication, backups, endpoint protection, awareness training, patch management, a risk assessment or a password manager.
Where do I apply for the subsidy?
Directly with the Netherlands Enterprise Agency (RVO) at rvo.nl/subsidies-financiering/mcz.
Sources: RVO - Mijn cyberweerbare zaak and NCSC - Mijn Cyberweerbare Zaak subsidy scheme. No rights can be derived from this article; for the exact conditions, always check rvo.nl.