Singapore · Grants

SG cybersecurity grants (2026): EDGE, CISOaaS, first-cert funding

PSG, EDG and MRA ceased on 29 September 2026. From 30 September 2026, Singapore SMEs apply under EnterpriseSG's EDGE Grant. CSA separately co-funds CISO-as-a-Service and the first Cyber Essentials or Cyber Trust certification. Reimbursement model, review monthly.

70%
EDGE max (SME)
S$100K
EDGE annual cap
S$3,600
Cyber Trust first-cert
70%
CSA CISOaaS

LowerPlane serves startups in the United States, Singapore, India and worldwide.

📅

What changed on 29–30 September 2026

EnterpriseSG consolidated the Productivity Solutions Grant (PSG), the Enterprise Development Grant (EDG) and the Market Readiness Assistance (MRA) into a single EDGE Grant. New applications from 30 September 2026 route to EDGE. In-flight PSG/EDG applications continue to be processed under the previous rules.

Where the money is

🏷️

EDGE Grant

EnterpriseSG · 30 Sep 2026
  • •Up to 70% for SMEs; up to 50% for non-SMEs.
  • •Capped at S$100,000 per year.
  • •Reimbursement basis — pay vendor, claim after.
  • •≥30% local ownership for several cybersecurity activities.
  • •Singapore-registered business entities.
🧑‍💼

CSA CISO-as-a-Service

CSA · co-funded
  • •Up to 70% co-funding for eligible SMEs.
  • •Delivered by CSA-onboarded consultants.
  • •Produces a cybersecurity health plan.
  • •Often doubles as readiness roadmap for Cyber Essentials or Cyber Trust.
🏅

CSA Cyber Trust first-cert

CSA · funding support
  • •Up to S$3,600 for first certification.
  • •Singapore-incorporated SMEs/NPOs.
  • •Reimbursement after certification.
  • •Pair with Cyber Essentials upgrade path.
✅

CSA Cyber Essentials first-cert

CSA · funding support
  • •Funding support for first certification.
  • •Published support window through 6 Feb 2028.
  • •Singapore-incorporated SMEs/NPOs.
  • •Reconfirm current eligibility at CSA before applying.

Eligibility pitfalls

🚫

Local-ownership rules

≥30% local ownership is required for several EDGE cybersecurity activities.

💵

Reimbursement model

Do not expect upfront cash — plan runway accordingly.

🧾

Approval timing

Approval must come before payment on specific activities.

📍

SG incorporation

Only Singapore-incorporated SMEs/NPOs qualify for CSA first-cert funding.

Does compliance software qualify?

The EDGE Grant and SMEs Go Digital catalogues list pre-approved cybersecurity solutions. Whether a given compliance platform is pre-approved depends on vendor-specific listing status. Check the pre-approved solutions directory before assuming eligibility, and ask the vendor whether their solution is currently listed.

Frequently asked questions

Is PSG still available?

No for new applications. PSG, EDG and MRA ceased on 29 September 2026. From 30 September 2026, Singapore SMEs apply under the EDGE Grant. Projects already under PSG continue to be processed per EnterpriseSG's transition rules.

Can foreign-owned startups apply for EDGE?

The EDGE Grant's cybersecurity activities typically require ≥30% local ownership. Foreign-owned Singapore entities should check the specific activity's eligibility rules before applying. CSA's Cyber Essentials / Cyber Trust funding has its own eligibility (SG-incorporated SMEs/NPOs).

Is the grant paid upfront?

No. EDGE is reimbursement-based: the organisation pays the vendor, completes the project, and claims the agreed share after approval. Factor this into cash-flow planning.

Can I claim EDGE for a compliance platform like LowerPlane?

It depends on whether the specific solution is listed in the EDGE pre-approved catalogue (or qualifies under an activity code). Compliance platforms occasionally appear under cybersecurity-related activities, but listing status is vendor-specific. Ask the vendor whether their solution is currently EDGE-approved before assuming the subsidy applies.

What is the EDGE application timeline?

EnterpriseSG publishes current processing timelines on the EDGE page; typical first-approval cycles run several weeks for straightforward applications. Approval must come before project start on specific activities, so build 4–6 weeks of lead time into your rollout.

Can I combine CSA + EDGE funding on the same project?

You generally cannot double-fund the same expense from two schemes. You can use EDGE for the readiness platform and consultant costs, and separately use CSA first-cert funding for the certification body audit fee itself — different line items on the same programme. Document the split clearly in your applications.

What if the compliance project spans more than one year?

EDGE operates on annual caps (up to S$100,000 per SME per year). Multi-year programmes split the claim across financial years. Plan the funding profile so each year's claim fits inside the cap and the activity codes still apply.

Running a certification project under EDGE?

LowerPlane bundles the readiness platform, advisor and auditor shortlist into a single scope the grant can fund.

70%
EDGE max (SME)
S$100K
Annual cap
S$3,600
Cyber Trust first-cert
Monthly
Review cadence