RiskMandate v1.34.4
UK support, in the open

A UK startup with a product. Now it needs users.

RiskMandate is a London company, and the product is ready. What we need now is traction: people using it, rooms to show it in, and introductions to the people who would buy it. The UK has a great deal of support for companies at exactly this point, spread across departments, agencies, trade bodies, banks and conferences. This page is every door we found, read on the official page and dated, with what we have done about each one, including nothing.

Why it is public

One page, three readers.

The same research serves three people, so it is written once and published rather than kept in a notebook. Nothing on it would need to be confidential on either side, because all of it is on the programmes' own pages.

If you know us

Am I missing something?

This page is written to be forwarded. If you know a programme, an event, a person in a department or a room of risk managers that should be on it, the most useful thing you can send is its name and its link.

If you are a founder too

Take it.

Most of this applies to any UK startup with a product and not enough users. The register is also published as data, uk-support.json, so you can copy it, filter it and keep your own status column.

For us

What we did, and what happened.

Each row carries our own status. When we apply, speak, get turned down or get in, the row says so, with the date. A founder reading it later sees what the door was actually like to walk through, in facts rather than opinions.

Where we are

The product is on sale. What we need is users.

Sixteen template Agent Behaviour Policies are published as encrypted vaults with their read keys, the thirteen prompts are free, and the first three levels can be bought from the store today; the fourth is waiting on its payment link. We exhibited at Startup Summit Lisbon in September 2026 and are going to Web Summit in November. What we do not yet have is a steady stream of people using it, and every lesson we have learnt so far came from somebody using it.

People who run agentsSecurity teams and developers who will run the prompts against an agent they already have and tell us what surprised them.
Stage time in the right roomsSecurity conferences, and the risk and insurance events most technology startups never go to, because that is where the buyer of a behaviour policy sits.
IntroductionsA CISO deploying agents, a risk manager asked to accept one, an underwriter asked to cover one. One conversation each changes the product.
A way abroadRSAC, GITEX, the EU. The EU AI Act is in force, and the question an ABP answers travels with it.
What changed this year

Three things we did not expect, and why search results are out of date.

22 July 2026

The departments moved.

The Department for Business and Trade became the Department for Business, Innovation, Science and Trade. AI strategy, public-sector AI adoption and the AI Security Institute moved to the Cabinet Office, and DCMS now leads cyber security policy for the economy. Many pages, and most search results, still use the old names. gov.uk fact sheet, read 24 September 2026.

Since 2023

The travel grant is gone.

The support founders remember, where the department paid towards a stand and the trip, was the UK Tradeshow Programme, withdrawn on 7 June 2023, and the Internationalisation Fund, closed in January 2023. What exists now is paid UK-branded pods, missions for companies already inside a government-backed programme, and an events listing. No grant towards exhibiting abroad was open on the day we read.

2025 to 2026

The two cyber programmes closed.

NCSC for Startups has ended and its page is an archive. Cyber Runway is closed with no next cohort published. The routes still open are conferences, the London cyber cluster, LASR for AI security, and accelerators run with insurers.

The one that describes what we build

A government challenge for agents in specific contexts.

The Sovereign AI R&D Procurement Scheme, announced on 31 August 2026, buys R&D from UK startups in batches every two months. Its third challenge is set with the National Cyber Security Centre, and its competition guidance words it like this:

“Enabling safe AI agent adoption – Produce an evidence-based, operational, and ideally automated risk management approach for CISOs to support risk-based decision-making for specific agents in specific contexts. The risk management approach should include both resilience and cyber security risks. … Solutions that support wide-scale adoption, such as those built on open-source frameworks, will be preferred.”

Competition guidance, Sovereign AI R&D Procurement Scheme, linked from sovereignai.gov.uk, read 24 September 2026. Contracts of £250,000 to £10 million. Batch deadlines 1 October 2026, 1 December 2026 and 1 February 2027; the expression of interest is due at least two weeks before. An Agent Behaviour Policy is one agent in one deployment, and the toolkit is open source. We have not applied yet. Whether to is the lead’s decision, and this row will say what it was.

The next twelve weeks

Dates, nearest first.

Everything in the register with a deadline before the end of the year. Each one links to its row.

  1. IAPP UK Intensive and AI Governance Global, London, April 2027: proposals close. Events
  2. techUK, one year on from the AI assurance roadmap, London, free. Events
  3. International Cyber Expo, Olympia, free, with overseas buyer delegations. Events
  4. BSides London: the call for papers closes. Events
  5. Digital Leaders AI Week: the call for talks is open. Events
  6. NatWest Accelerator Pitch, London round: entries close at 5pm. London
  7. Sovereign AI procurement: expression of interest for the 1 December batch. Above
  8. Techstars London: applications close. Cyber and AI
  9. UK-Singapore collaborative R&D: closes, with a Singapore partner only. Government
The register

Every door, with its source and its date.

Two chips on each row. The first is what the programme’s own page said on the day it was read: open, rolling, a date, closed, or unclear when the page refused our reader or said nothing. The second is what we have done about it. The quote beside them is the phrase on the page that shows the status.

79 entries, read 24 September 2026: 15 open, 19 rolling, 20 with a date, 15 unclear, 10 closed and kept so nobody spends an afternoon on them.

Central government

Government money, advice and government as first customer.

The Department for Business and Trade became the Department for Business, Innovation, Science and Trade on 22 July 2026, and AI strategy and the AI Security Institute moved to the Cabinet Office. Some pages still carry the old names. Where a row says the department, it means the renamed one.

Sovereign AI R&D Procurement Scheme

Sovereign AI unit, with HM Treasury and the Cabinet Office; Challenge 3 set with the NCSC

R&D contracts of £250,000 to £10 million, most expected at £1 million to £3 million. The supplier keeps its IP. No minimum turnover or trading history.

Who it is for. UK-registered startups and SMEs, project delivered in the UK. First join the Approved Supplier List through an expression of interest, at least two weeks before a batch deadline.

For us. Challenge 3, Enabling safe AI agent adoption, asks for a risk management approach for CISOs "for specific agents in specific contexts". That is what an Agent Behaviour Policy is. It would also make government the first customer, on systems we would be contracted to run.

Next. Expression of interest by about 17 November 2026 for the 1 December batch; batch 3 is 1 February 2027. Guidance PDF linked from the site, read 24 September 2026.

Dated Not started “Batch 2: Submit your proposal by 1 December 2026” · sovereignai.gov.uk, read 24 September 2026

Sovereign AI Fund

Sovereign AI unit

A £500 million fund writing £1 million to £10 million cheques. Trust, safety & assurance is one of its stated focus areas.

Who it is for. UK AI companies.

For us. A priced round later. Investee status confers no advantage in the procurement scheme above, and the guidance says so.

Open Not started sovereignai.gov.uk, read 24 September 2026

AI Assurance Innovation Fund

Announced by DSIT; which department holds it after July 2026 is not stated

£11 million for "novel AI assurance mechanisms", according to the roadmap of 3 September 2025.

Who it is for. Not stated.

For us. The subject matches directly. The roadmap said round one would open in spring 2026; the sector plan of 10 June 2026 says the fund was established; no call is visible on the Innovation Funding Service today.

Next. Ask the business support helpline which department runs it now.

Unclear Not started gov.uk, read 24 September 2026

Grants, loans and contracts, per competition. The forward list is on UKRI's future opportunities page.

Who it is for. Varies by competition.

For us. On 24 September 2026 none of the 26 open competitions was about AI assurance or cyber security, apart from the Singapore one below. Worth a monthly look.

Next. UK-Germany bilateral round 5 and two Frontier AI SME calls are listed as opening in October 2026.

Open Not started apply-for-innovation-funding.service.gov.uk, read 24 September 2026

UK-Singapore collaborative R&D 2026

Innovate UK with Enterprise Singapore

A grant of £100,000 to £900,000 to the UK partner.

Who it is for. A UK business with at least one Singapore business funded by Enterprise Singapore.

For us. Only with a Singapore partner, such as an insurer or a company deploying agents.

Next. Closes 16 December 2026, 11am.

Dated Not started “Artificial Intelligence, Cyber Security” · apply-for-innovation-funding.service.gov.uk, read 24 September 2026

Contracts for Innovation (formerly SBRI)

Innovate UK, for public-sector buyers

Fully funded public-sector R&D contracts, one call per problem.

Who it is for. Organisations of any size.

For us. None of the open calls is about AI or cyber today. A public body with an agent problem would publish one here.

Open Not started apply-for-innovation-funding.service.gov.uk, read 24 September 2026

Contracts Finder

Cabinet Office

A search of public-sector tenders; larger ones are on Find a Tender.

Who it is for. Any supplier.

For us. Saved searches for AI assurance, AI governance and agentic.

Open Not started “worth over £12,000” · gov.uk, read 24 September 2026

Free advice by phone, email, webchat and WhatsApp, Monday to Friday, 9am to 6pm.

Who it is for. Businesses in England.

For us. Two questions the pages do not answer: who runs the AI Assurance Innovation Fund now, and what replaces regional trade advisers for a London company.

Open Not started “Telephone: 0800 998 1098” · gov.uk, read 24 September 2026

Live and recorded sessions, including selling services overseas.

Who it is for. UK businesses.

For us. The basics of selling a service into the EU and the US.

Open Not started “Completely free to join” · business.gov.uk, read 24 September 2026

Export Support Service

The department

Answers on market rules and selling services abroad.

Who it is for. UK businesses.

For us. What selling into the EU looks like with the AI Act in force.

Open Not started “ask the export support team a question” · gov.uk, read 24 September 2026

HMRC's view that a share issue is likely to qualify for investor tax relief. SEIS allows up to £250,000 raised; EIS up to £10 million a year.

Who it is for. UK trading companies within the limits on each scheme's page. First-time applicants name prospective investors.

For us. Most UK angel cheques expect it, and HMRC states no turnaround time, so it is started before a raise, not during one.

Rolling Not started “apply using the new online form for all schemes” · gov.uk, read 24 September 2026

A 20% credit under the merged scheme; loss-making companies spending at least 30% on R&D can claim enhanced support.

Who it is for. Companies doing qualifying R&D.

For us. Engineering spend may qualify. Whether this work counts as R&D needs a specialist's view, not ours.

Rolling Not started gov.uk, read 24 September 2026

Start Up Loans

British Business Bank

A personal loan of £500 to £25,000 over one to five years, with up to twelve months of mentoring.

Who it is for. UK residents over 18 whose business has traded for less than five years.

For us. It is a personal loan to a founder, not company money.

Rolling Not started “fixed interest rate of 7.5%” · gov.uk, read 24 September 2026

Help to Grow: Management

The department, through business schools

A twelve-week course, 90% funded, £750 to the company.

Who it is for. SMEs with 5 to 249 employees.

For us. Not until the team has five people.

Next. King's College London cohort starts 9 November 2026.

Dated Not for us kcl.ac.uk, read 24 September 2026

Global Business Innovation Programme

Innovate UK Business Connect

Group flights, accommodation and in-market travel for one senior person on an innovation mission; a £1,000 commitment fee refunded on completion.

Who it is for. UK SMEs.

For us. This is the closest current thing to the government-sponsored trips founders describe. No AI or cyber mission is listed today.

Unclear Not started iuk-business-connect.org.uk, read 24 September 2026
Cyber and AI

The cyber and AI programmes, after the two big ones closed.

NCSC for Startups has ended and Cyber Runway is closed with no next cohort published; both are in the last section. The DCMS cyber security newsletter of 15 September 2026 says DCMS now leads cyber security policy for the economy, so any successor would come from there.

LASR, the Laboratory for AI Security Research

Government with Plexal, Oxford, Queen's University Belfast and the Turing

Industry validation and proof-of-concept work; the LASR Connect community. Agentic AI Security is one of its three research areas.

Who it is for. UK SMEs working on AI security.

For us. The agentic programme was delivered in 2025 and no call is open today, but the site takes technology submissions between calls.

Next. Join LASR Connect and submit the technology, so we are known before the next call.

Unclear Not started lasr.ac.uk, read 24 September 2026

Cyber London

Not-for-profit; the recognised cyber cluster for London

Events, roundtables, mentoring.

Who it is for. An open network; membership cost not published.

For us. The local route to CISOs. Its roundtables on securing AI are invitation-only, so the ask is to be invited.

Rolling Not started “recognised by DSIT and UKC3 as the Cyber Cluster for London” · cyberlondon.com, read 24 September 2026

techUK

Trade body

The Cyber SME Forum, the AI hub, events, and UK pavilions abroad. Fees are not published.

Who it is for. UK digital technology companies.

For us. Its event of 28 September 2026 on the AI assurance roadmap is free and open, and names insurers, auditors and regulators as its audience.

Rolling Not started “The first step… is always a meeting with our Membership team” · techuk.org, read 24 September 2026

Cyber Exchange

techUK, funded by government

A live list of cyber competitions, grants, consultations and trade missions with their deadlines.

Who it is for. UK cyber companies.

For us. The one directory in this field that is kept current. We link to it rather than copy it.

Rolling Not started cyberexchange.uk.net, read 24 September 2026

Plexal

Innovation centre, Stratford

Coworking, delivery of government cyber programmes, and the UK House delegation at RSAC.

Who it is for. Startups and scale-ups.

For us. UK House places at RSAC 2026 went to companies from government-backed programmes, so the route abroad runs through Plexal's programmes.

Rolling Not started plexal.com, read 24 September 2026

Founders Factory × Aviva

Founders Factory, with Aviva

£50,000, four months, and access to Aviva. Equity terms are not on the page.

Who it is for. Pre-seed to Series A.

For us. An insurer as the corporate partner, with insurance, cyber and AI all in scope.

Open Not started “Insurance… Cybersecurity… AI” · foundersfactory.com, read 24 September 2026

Techstars London

Techstars

Thirteen weeks and a mentor network; the programme invests for equity.

Who it is for. Early-stage companies, any sector.

For us. Costs equity. The programme starts 8 March 2027 with demo day on 3 June.

Next. Applications close 18 November 2026.

Dated Not started techstars.com, read 24 September 2026

Twelve weeks, no equity taken, mentoring and cloud credits. The 2025 edition was AI-first.

Who it is for. UK AI companies, seed to Series A.

For us. Depends on the 2026 dates, which the page does not show.

Unclear Not started startup.google.com, read 24 September 2026
Where the buyer is

Insurance and risk: the audience most tech startups miss.

An Agent Behaviour Policy is written for risk managers, boards and underwriters as much as for security teams. These are the rooms they are in.

Ten weeks, workspace and eight to twelve mentors from the Lloyd's market. About ten companies are chosen from 150 to 200 applicants.

Who it is for. Start-ups, scale-ups and sometimes mature companies.

For us. Cohort 17's themes included autonomous systems coverage, and it already includes a company whose stated aim is making AI risk insurable. Cohort 17 closed on 20 July 2026; the Cohort 18 window is not published.

Next. Ask lloydslab@lloyds.com when Cohort 18 opens. Cohort 17 demo day is 9 December 2026.

Unclear Not started lloyds.com, read 24 September 2026

Lloyd's Lab Discovery

Lloyd's Lab, with the LMA and LIMOSS

Proofs of concept with managing agents, who bring the problem; the Lab looks for solutions.

Who it is for. No vendor application form was found.

For us. A route to a proof of concept with an underwriter, if one names agent risk as its problem.

Rolling Not started lloyds.com, read 24 September 2026

FinTech Innovation Lab London

Accenture, with the Partnership Fund for New York City

A twelve-week programme with access to more than 45 financial institutions, insurers among them.

Who it is for. Not stated on the page.

For us. A structured route to pilots with insurers.

Next. "Applications for 2027 are opening soon! Register your interest now."

Unclear Not started fintechinnovationlab.com, read 24 September 2026

Sixteen groups with events and webinars. The cyber group ran "Fundamentals of agentic AI risk management" on 22 January 2026, online and free.

Who it is for. Members join; many sessions are open to non-members.

For us. Risk managers are the people who sign an acceptance. Offering the cyber group a follow-up session is the direct route.

Rolling Not started “thought leadership should be accessible to everyone” · theirm.org, read 24 September 2026

Airmic

Airmic

The UK association of corporate risk and insurance managers. Suppliers take partner statuses; the process is not published.

Who it is for. Risk and insurance professionals as members.

For us. The people who buy cover for a company. Its 2027 conference is in Liverpool in June; the exact dates are not yet published.

Unclear Not started airmic.com, read 24 September 2026

Insurtech UK

Insurtech UK

Pitch days, working groups, a government affairs group. It has a memorandum of understanding with the ABI.

Who it is for. Member tier: UK insurtechs, or firms earning 60% of revenue from insurance. Partner tier: service providers. Fees not published.

For us. Which tier applies to us is a question to ask them.

Rolling Not started insurtechuk.org, read 24 September 2026

FCA Innovation Pathways

Financial Conduct Authority

Regulatory guidance for new propositions.

Who it is for. Regulated or non-regulated firms of any size.

For us. How insurers' own AI obligations bear on a behaviour policy, from the regulator.

Open Not started “of any size” · fca.org.uk, read 24 September 2026

FCA AI Lab, AI Spotlight

Financial Conduct Authority

A showcase of AI solutions to financial services firms and the regulator. AI Live Testing cohort 2 is closed.

Who it is for. Firms with AI solutions relevant to financial services.

For us. Exposure to the firms the FCA supervises, which include insurers.

Open Not started “Applications to be part of the AI Spotlight will remain open” · fca.org.uk, read 24 September 2026

Event invitations, committee overviews, a profile page. Fee not stated.

Who it is for. Organisations that trade with or advise Lloyd's underwriters.

For us. After a first relationship with a managing agent, not before.

Rolling Not started “trade with, or advise, Lloyd's underwriting businesses” · lmalloyds.com, read 24 September 2026
Events, by date

Twelve months of rooms, with the deadline for each.

Security buyers, AI governance people, risk managers and insurers, from September 2026 to June 2027. Where a date could not be confirmed on the organiser's own page, the row says unclear.

One year on: the Trusted Third-Party AI Assurance Roadmap

techUK · 28 September 2026 · London

An afternoon on the government's AI assurance roadmap, free.

Who it is for. Its stated audience includes insurers, auditors and regulators.

For us. The assurance market meeting in one room, four days from the date this was read.

Dated Not started techuk.org, read 24 September 2026

International Cyber Expo

Nineteen Group · 29–30 September 2026 · Olympia London

Free registration, and a delegations programme that brings overseas buyers to London.

Who it is for. Visitors and exhibitors.

For us. Overseas cyber buyers without leaving London.

Dated Not started “direct access to vetted decision-makers from key global markets” · internationalcyberexpo.com, read 24 September 2026

FERMA Forum 2026

FERMA · 4–6 October 2026 · Rotterdam

Attendance; exhibiting through the Forum's own site.

Who it is for. European corporate risk managers.

For us. The European version of the room Airmic is in the UK.

Dated Not started ferma.eu, read 24 September 2026

Digital Leaders AI Week

Digital Leaders · 12–23 October 2026

A speaking slot.

Who it is for. Anyone who submits a talk.

For us. The nearest stage time on the calendar.

Open Not started “The Call for Talks is open” · digileaders.com, read 24 September 2026

DTX London

DTX Events · 14–15 October 2026 · ExCeL London

Free for end users; speaking; a startup zone.

Who it is for. Enterprise technology buyers.

For us. AI adoption and cyber tracks under a trust-and-risk theme.

Dated Not started dtxevents.io, read 24 September 2026

Insurance Innovators Summit

Insurance Innovators · 3–4 November 2026 · London

A startup zone and pitch slots.

Who it is for. About 2,000 insurance leaders, a third of them C-suite, by the organiser's figures.

For us. Insurers, in London.

Dated Not started insurance-innovators.com, read 24 September 2026

Web Summit

Web Summit · 9–12 November 2026 · Lisbon

Startup exhibition, pitch competition.

Who it is for. Startups by application.

For us. We are going. The exhibitor listing, the logo for the exhibitor board and the deck were sent in September 2026.

Dated In it websummit.com, read 24 September 2026

#RISK Expo Europe

GRC World Forums · 10–11 November 2026 · ExCeL London

Attendance, exhibiting, speaking.

Who it is for. Governance, risk and compliance teams.

For us. Risk and compliance people in London, the week of Web Summit.

Dated Not started riskexpoeurope.com, read 24 September 2026

IAPP Europe Congress

IAPP · 16–19 November 2026 · Brussels

Attendance at €1,595 to €1,945; exhibiting.

Who it is for. Privacy, AI governance and legal teams.

For us. The AI governance audience, in the EU.

Dated Not started iapp.org, read 24 September 2026

Black Hat Europe, Startup Spotlight

Informa · 7–10 December 2026 · ExCeL London

A five-minute video pitch; no entry fee.

Who it is for. Companies five years old or less with fewer than 50 staff.

For us. Security practitioners in London. The site refused our reader, so the dates and deadline are from search results only.

Unclear Not started blackhat.com, read 24 September 2026

BSides London

Community · 12 December 2026 · Novotel London West

A 45-minute talk, a workshop, or a fifteen-minute Rookies slot for first-time speakers.

Who it is for. Anyone.

For us. A vendor-neutral talk on the gap between what an agent can do and what it was authorised to do.

Next. Call for papers closes 30 September 2026.

Dated Not started “All calls will open on 1 August and close on 30 September.” · pretalx.com, read 24 September 2026

ITC London

InsureTech Connect · 25–26 January 2027 · The Brewery, London

A startup zone, and a Challenge Lab where startups pitch against insurers' own problems.

Who it is for. Invitation or vetted application.

For us. Senior insurers, managing general agents and brokers.

Dated Not started london.insuretechconnect.com, read 24 September 2026

Cyber Security & Cloud Expo, with AI & Big Data Expo

TechEx · 3–4 February 2027 · Olympia London

Attendance, exhibiting, speaking.

Who it is for. Enterprise technology teams.

For us. Dates are from the organiser's ticket listing; the site itself returned a challenge page.

Unclear Not started cybersecuritycloudexpo.com, read 24 September 2026

Insurtech Insights Europe

Insurtech Insights · March 2027 · InterContinental London, The O2

A startup pass for insurtechs founded within five years.

Who it is for. Insurers and insurtechs.

For us. Whether a behaviour-policy company counts as an insurtech for the pass is a question to ask. Search results give two different March dates.

Unclear Not started insurtechinsights.com, read 24 September 2026

IAPP UK Intensive and AI Governance Global

IAPP · 5–8 April 2027 · Hilton London Metropole

Speaking by proposal; exhibiting.

Who it is for. AI governance, privacy and regulatory teams.

For us. AI governance buyers in London.

Next. Proposals close 27 September 2026.

Dated Not started “Submit your proposal by 27 Sept” · iapp.org, read 24 September 2026

RSAC 2027

RSAC · 5–8 April 2027 · San Francisco

A call for speakers, Innovation Sandbox, Launch Pad and an early-stage expo.

Who it is for. Security companies and speakers.

For us. The largest security buying audience. The site refused our reader; search results give 9 October 2026 for the speaker deadline.

Unclear Not started rsaconference.com, read 24 September 2026

CYBERUK 2027

NCSC · 11–13 May 2027 · Liverpool

A startup and SME pod, 2m by 1.5m, at £1,500 + VAT for organisations under 40 staff; a Cyber Den pitch whose winner gets twelve months of NCSC support; Tech Talks by open call.

Who it is for. UK organisations.

For us. The theme is securing the AI era, and the pod is priced for a company our size.

Next. The Tech Talks call opens in autumn 2026.

Dated Not started “11 – 13 MAY 2027, LIVERPOOL EXPERIENCE CAMPUS” · cyberuk.uk, read 24 September 2026

London Tech Week

Informa and Founders Forum · 7–11 June 2027 · London

Startup stages, investor meetings, a free startup pass by criteria.

Who it is for. Founders; the pass has limits on funding and headcount.

For us. Broad exposure, with ministers in the room.

Dated Not started londontechweek.com, read 24 September 2026

Infosecurity Europe

RX · 8–10 June 2027 · ExCeL London

A Cyber Start-Ups Zone for companies under five years old, a government-backed Cyber Innovation Zone, and a startup award whose prize is a stand.

Who it is for. Early-stage cyber companies.

For us. About 13,000 security professionals, in London. The 2027 award window is not yet published.

Dated Not started infosecurityeurope.com, read 24 September 2026

The AI Summit London

Informa · 9–10 June 2027 · Tobacco Dock

A start-up village with live pitching; speaker submissions.

Who it is for. Commercial AI buyers.

For us. The people deploying agents.

Dated Not started london.theaisummit.com, read 24 September 2026

OWASP Global AppSec EU

OWASP Foundation · 21–25 June 2027 · Vienna

A call for papers and training.

Who it is for. Application security practitioners.

For us. The OWASP generative AI community. The 2027 call is not yet published; last year's ran November to February.

Unclear Not started owasp.org, read 24 September 2026
Going abroad

Government help to travel: what it is now.

Founders remember the department paying for stands and travel. That grant was the UK Tradeshow Programme, withdrawn in 2023. What exists now is paid UK-branded pods, missions for companies already in a government-backed programme, and a listing of events.

A listing of UK and overseas events and missions. No grants are mentioned.

Who it is for. UK businesses.

For us. Where an AI or cyber mission would be announced first.

Open Not started “Find UK and overseas events” · events.great.gov.uk, read 24 September 2026

UK Pavilion at GITEX Global

techUK, with the department and Tradefair · 7–11 December 2026 · Dubai

A pod on the UK pavilion at £5,000 + VAT. No subsidy is mentioned.

Who it is for. techUK members, first come first served.

For us. The techUK page still takes expressions of interest; another trade body's page says registration closed on 1 September.

Unclear Not started techuk.org, read 24 September 2026

UK House at RSAC

Plexal, funded by government

A place in the UK delegation at RSAC in San Francisco.

Who it is for. In 2026, companies from Cyber Runway, LASR and CyberASAP.

For us. Being in a government-backed programme is the way in, which is why LASR is on this page.

Unclear Not started plexal.com, read 24 September 2026

Paid pods at defence and security shows.

Who it is for. UK defence and security companies.

For us. Security shows abroad under the UK flag, paid, not granted.

Open Not started “exhibiting under clear UK or HMG branding” · gov.uk, read 24 September 2026

Grow London Global

London & Partners

A free twelve-month programme for tech companies expanding abroad, according to search results.

Who it is for. Scaling tech companies; the page refused our reader.

For us. Later, once there is something to export.

Unclear Not started grow.london, read 24 September 2026
London

London, and the free things to claim today.

Grow London Local

London & Partners, funded by the Mayor

Guides, free one-to-one sessions, and a searchable directory of borough support.

Who it is for. London small businesses.

For us. The London front door, and a directory we link to rather than copy.

Rolling Not started “free access to all the support you need to help start and grow your business” · growlondonlocal.london, read 24 September 2026

Prizes of £70,000, £20,000 and £10,000.

Who it is for. UK limited companies incorporated within five years with revenue up to £1 million; a 60-second video; membership of the free NatWest community.

For us. The only open prize round found.

Next. Closes 16 October 2026, 5pm; final 19 November.

Dated Not started “Closing date for entries: 5pm, 16th October 2026” · natwest.com, read 24 September 2026

Workshops, one-to-ones, market research databases.

Who it is for. Anyone.

For us. Market research on insurers and brokers, at no cost.

Rolling Not started “Free to join, and open to everyone” · bl.uk, read 24 September 2026

Tech London Advocates

Volunteer-led non-profit

42 working groups and introductions, free.

Who it is for. By invitation; ask the organisers.

For us. Introductions.

Rolling Not started techlondonadvocates.org.uk, read 24 September 2026

OWASP London chapter

OWASP London

Six to eight meetups a year, live-streamed and recorded.

Who it is for. Speakers presenting methods, with any tools shown open source and free.

For us. The method and the open-source toolkit, not the product.

Rolling Not started “avoid any commercialism” · papercall.io, read 24 September 2026

Azure credits, starting immediately.

Who it is for. Privately held software companies below Series C; no funding requirement.

For us. Claimable today.

Rolling Not started “up to $150K in Startup credits over time” · learn.microsoft.com, read 24 September 2026

$2,000 in credits unfunded; up to $350,000 for funded AI companies.

Who it is for. The first tier needs no funding.

For us. Claimable today.

Rolling Not started “$2,000 in credits” · cloud.google.com, read 24 September 2026

AWS Activate, Founders tier

Amazon Web Services

Up to $5,000 in credits.

Who it is for. Pre-Series B companies under ten years old.

For us. Claimable today.

Rolling Not started aws.amazon.com, read 24 September 2026

API credits and higher rate limits.

Who it is for. Credits need institutional funding and founding within four years.

For us. After a raise.

Rolling Not started “equity funding from an institutional investor” · claude.com, read 24 September 2026
Closed, or not for London

Closed, kept here so nobody spends an afternoon on them.

Search results still recommend most of these. Each one was checked on its own page.

NCSC for Startups

NCSC, with Plexal

Nothing now; the page is an archive.

Who it is for. –

For us. No successor is named.

Closed Not for us “the programme is no longer running” · ncsc.gov.uk, read 24 September 2026

Cyber Runway

Plexal, funded by government

An accelerator that took no equity, and a route into UK House at RSAC.

Who it is for. UK cyber companies.

For us. Would fit if it reopens. Interest can be registered at cyberrunway@plexal.com.

Closed Not started “Applications for the next cohort of Cyber Runway are now closed” · plexal.com, read 24 September 2026

UK Tradeshow Programme

Department for Business and Trade

Nothing now. This was the grant for overseas stands.

Who it is for. –

For us. No replacement grant was found.

Closed Not for us “This guidance was withdrawn on 7 June 2023” · gov.uk, read 24 September 2026

Nothing now.

Who it is for. –

For us. Closed.

Closed Not for us “Smart grants are now closed for new applications” · ukri.org, read 24 September 2026

Innovate UK Business Growth

Innovate UK Business Connect

Paused for new requests; it comes bundled with an Innovate UK grant.

Who it is for. Existing clients and grant winners.

For us. Paused.

Closed Not for us “New requests into the service, outside of the above, have been paused” · iuk-business-connect.org.uk, read 24 September 2026

AI Security Institute grants

AI Security Institute

Research grants, when open.

Who it is for. Academic institutions and non-profits; companies are not listed.

For us. Not for companies.

Closed Not for us “Our programmes are not currently accepting applications” · aisi.gov.uk, read 24 September 2026

CyberASAP

Innovate UK

Funding to take academic cyber research to market.

Who it is for. Academics.

For us. Not for companies.

Closed Not for us “exclusively for UK registered academic institutions” · iuk-business-connect.org.uk, read 24 September 2026

UK Cyber Cluster Collaboration (UKC3)

Community interest company

Operations ended 31 March 2026; the clusters continue on their own, Cyber London among them.

Who it is for. –

For us. Go to the cluster directly.

Closed Not for us “will continue operating independently” · ukc3.co.uk, read 24 September 2026

The Shoreditch hub remains, from £180 + VAT a month.

Who it is for. UK SMEs.

For us. The two programmes that fitted are closed.

Closed Not for us “Applications closed” · labs.uk.barclays, read 24 September 2026

G-Cloud 15

Government Commercial Agency (formerly Crown Commercial Service)

A listing public buyers can call off.

Who it is for. Suppliers already listed.

For us. Closed to new suppliers until about February 2028.

Closed Not for us “reopening after 18 months” · gca.gov.uk, read 24 September 2026

International trade advisers, one to one

The department's regional teams

One-to-one export advice.

Who it is for. Businesses outside London.

For us. Not for a London company. Who serves London instead is not stated on the page.

Open Not for us “eligible businesses outside of London” · gov.uk, read 24 September 2026

Mentoring and visa help.

Who it is for. Founders from abroad moving to the UK.

For us. Not for a UK company.

Open Not for us “highly selective programme for ambitious international scaleups” · business.gov.uk, read 24 September 2026
Where we would start

Eight doors, in the order we would try them.

Chosen for who is in the room rather than for the size of the prize. The lead decides; the register’s status column changes when something is sent.

  1. The Sovereign AI procurement challenge. Its text describes the product, and it would make government the first customer.
  2. BSides London and OWASP London. A talk on the method, not the product, in front of the people who run agents.
  3. IAPP AI Governance Global. The AI governance audience in London, with proposals closing first.
  4. CYBERUK 2027. A £1,500 pod, a pitch to the NCSC, and a theme of securing the AI era.
  5. Lloyd’s Lab and the FinTech Innovation Lab. The two structured routes to underwriters. Both windows are yet to open, so the step is to ask when.
  6. The Institute of Risk Management and Airmic. Risk managers sign acceptances; the IRM cyber group already ran a session on agentic AI risk.
  7. Founders Factory with Aviva. An accelerator with an insurer as the partner, open now.
  8. The cloud credits that need no funding. Microsoft and Google, today, because they cost an afternoon.
Directories that already exist

Where to look after this page.

This page is not the first list. These are kept up to date by the people who run them, and we link to them rather than copy them.

gov.uk

Finance and support for your business

127 schemes, filterable by region, stage, type of support, industry and size. Read 24 September 2026.

techUK

Cyber Exchange opportunities

Cyber competitions, grants, consultations and trade missions, with deadlines.

London & Partners

Grow London Local

The London front door for small businesses, with a searchable directory of borough support.

How this page is written

The same rules as the rest of the site.

  • The programme’s own page, read and dated. Every row links to the official page it was read from. Where a page refused our reader, the row says unclear and says why, rather than trusting a search result.
  • The status is what the page said. A closure carries the words that close it. Dates we could not confirm with the organiser are marked unclear.
  • No verdict on any programme. What it gives, who it is for, and what it would be for us. Whether it was worth it is for the status column to show over time, in facts.
  • Closed ones stay. Search results still recommend most of them, and an afternoon spent on a closed programme is an afternoon not spent on users.
  • It will go out of date. The register says the date it was read. If a row is wrong, tell us, and it changes with a new date.
Am I missing something?

Send the door we have not found.

Its name and its link is enough. If you have been through it, what happened, as facts: the dates, what was asked, what came of it. If a row is wrong or has closed, that too. And if you would introduce us to a CISO, a risk manager or an underwriter who is deciding about an agent, that is the most useful message of all.