Build once, reuse forever
The first security questionnaire costs you days. The second costs minutes, because everything is then locked in. That difference is what you pay for.
Free, and it stays that way
The NIS2-check. Three questions — sector, size, supply chain position — and you know whether you are an essential entity, an important one, or whether you get the requirements through your clients. With the reason and what is then expected of you.
We give this away because it is the moment when someone knows where they stand. The entire knowledge base also remains free, without an account.
Do the NIS2 checkThe setup
One fee, and you leave with your problem solved and a dossier that stays in place: we set up your cyber-dossier, generate the policy set that follows from it, and answer your first security questionnaire with it — or prepare your registration with the competent authority.
Setup
one-time · dossier + policy set + first questionnaire or registration
The subscription
For what comes next, and it does come: the next questionnaire, from the next client, next year again. Your dossier stays current, you get notified if a change in the rules affects your dossier specifically, the notification texts are ready for when things go wrong, and there are 3 questionnaires per year included.
Per month
per month · cancelable monthly
Per year
per year · two months savings
More questionnaires than the 3 included? Those cost € 49 each. So whoever does one per year does not contribute to whoever does ten.
A calculation example
An organisation with 25 employees and 2 managers pays in the first year the setup plus an annual subscription, plus training for those who need it. After that, only the subscription remains.
By comparison: an external NIS2 project at a consulting firm typically starts at several thousand euros and runs up to tens of thousands. That gives you bespoke advice — but no dossier that answers next quarter's questionnaire.
What is included?
| Component | Free | Setup | Subscription |
|---|---|---|---|
| The NIS2-check: which questions may your client ask | ✓ | ✓ | ✓ |
| The knowledge base, with source attribution | ✓ | ✓ | ✓ |
| Build your cyber-dossier | — | ✓ | ✓ |
| Upload energy bills; you confirm what we read from them | — | ✓ | ✓ |
| CO₂-indication care obligation and 2, with source and assessment date | — | ✓ | ✓ |
| One questionnaire answered from your dossier | — | one | 3 per year |
| Basic report on the NIS2 standard, with verification link | — | ✓ | ✓ |
| Dossier stays current with changes in the standards | — | — | ✓ |
| Notification if a change affects your dossier specifically | — | — | ✓ |
What a report from us is and is not
It is a dated report based on the voluntary EU standard for SMEs, drawn up from the data you have provided. It includes a verification link, so that your client can check when it was drawn up.
It is not a certificate and not a quality mark. There is no body that recognizes these reports — not for us and not for any other provider. We do not provide assurance, audit or sustainability advice: we structure what you provide.
The CO₂ figures are indications, calculated using the official Dutch statutory sources, with the source and reference date shown below. For countries where we do not have an established set of factors, we do not show a figure — we prefer nothing to a number that looks right and is wrong.
All amounts are exclusive of VAT. Are you an accountant or adviser with multiple client dossiers? Get in touch — there is a tiered pricing for that.