This Chaillot Paper – which uses space exploration as a metaphor to demystify some of the concepts and challenges linked to cyber-related policymaking – focuses on the EU’s cyber sanctions regime as established by Council Decision 2019/797 and Council Regulation 2019/796. The EU’s autonomous cyber sanctions regime encompassing measures such as travel bans and asset freezes – represents a significant achievement on the EU’s path to promote a free, open and secure cyber space and defend the rules-based international order. However, the growing complexity of cyber threats and the proliferation of malicious actors intent on undermining the EU’s global standing, as well as its economic power and political foundations, suggest that it is not yet the time for self-congratulation.