Order

NIS2 Magic Button From your company's website address to a pre-filled NIS2 profile — you confirm only what is missing.

Select the services you are interested in and place an order. Ordering is automatic: payment is confirmed instantly and documents are usually ready within an hour of payment — we will notify you by e-mail. For larger volumes or group-wide needs we reply with a personal offer.

Services

Company-Specific NIS2 Cybersecurity Risk Management Policy — 129 EUR

Your company's NIS2 risk management policy — generated from your country, sector and company profile on the basis of your country's transposing law, with verbatim legal citations, in your language. Policies on risk analysis and information system security are the first measure in the NIS2 Article 21(2) list (point (a)) — the document the rest of your NIS2 documentation builds on. One-time payment, no subscription.

Company-specific content: country, sector, size and your answers — not a generic template
Based on your country's enacted transposing law, verbatim citations with sources
The same quality gate as the full package — same rigour, same control chain
In your language, downloadable from the portal
Comes with an account and a living documentation profile: what exists, what is missing, when to renew
The same document is included in the full documentation package

NIS2 Document Package — 299 EUR

Each document is generated from your own company details and sector, and is built on the verbatim text of your country's NIS2 transposition law, whose integrity is verified by a SHA-256 checksum. Your package is typically ready within an hour of payment.

A complete document package for meeting the requirements of NIS2 and your country's national transposition law — generated automatically for your company's profile, grounded in the law text in force.

Cybersecurity Risk Management Policy — describes how your company identifies and manages cyber risks (NIS2 Art. 21).
Incident Handling Plan — a step-by-step guide for what to do and whom to notify when a security incident happens.
Business Continuity Plan — how your company keeps operating and recovers after a serious disruption.
Supply Chain Security Policy — the security requirements you set for your own suppliers and partners.
Management Responsibility Statement and Training Framework — documents management's responsibility and the staff training plan (NIS2 Art. 20).
Fill-in assistant in the portal — step by step, with a manual explanation for every field

NIS2 Document Package + technical scan — 590 EUR

A complete document package for meeting NIS2 requirements — generated automatically from your company's profile, based on the law currently in force. Plus an external technical scan and 12 months of updates.

Cybersecurity Risk Management Policy — describes how your company identifies and manages cyber risks (NIS2 Art. 21).
Incident Handling Plan — a step-by-step guide for what to do and whom to notify when a security incident happens.
Business Continuity Plan — how your company keeps operating and recovers after a serious disruption.
Supply Chain Security Policy — the security requirements you set for your own suppliers and partners.
Management Responsibility Statement and Training Framework — documents management's responsibility and the staff training plan (NIS2 Art. 20).
Fill-in assistant in the portal — step by step, with a manual explanation for every field
NIS2 technical security check — external attack-surface check + report
12 months of updates — if your country's law changes, we regenerate the documents under the new law, at no extra charge.

NIS2 technical security check — external assessment — 99 EUR

An independent external technical check: DNS, SPF/DKIM/DMARC, TLS configuration, open ports and security headers — results are mapped against the NIS2 Article 21(2) measures and packaged as verifiable evidence you can show to a client or a supervisor. This is not a penetration test or an audit — it is an external check of your publicly visible infrastructure.

DNS setup — we check whether your domain's nameservers and records are correctly configured and protected against spoofing.
Email spoofing protection (SPF, DKIM, DMARC) — we check whether an outside party could send emails pretending to be your company.
Encrypted connection (TLS) — we check whether your website's certificate is valid and the encryption strong enough.
Open ports — we check which services are reachable from the internet. Open admin interfaces are a common attack path.
Web server security headers — we check whether the server gives visitors' browsers protective instructions that block common attacks.
Findings mapped against the Article 21(2) measures — you see which NIS2 requirement each finding relates to, not just a technical result.
Verifiable evidence report — a document you can show to a client, partner or supervisor as proof of the check performed.
Ranked remediation recommendations — you know which finding to start with when time or resources are limited.

Supply Chain Security Attestation — 299 EUR

Your client falls under NIS2 and requires security measures from suppliers (Article 21(2)(d))? This attestation is for companies that are not NIS2 entities themselves: a technical check plus structured evidence that answers your client's supply chain requirements with a single document.

Baseline technical check of your public infrastructure — the same checks as in the NIS2 technical security check (DNS, email, TLS, ports, security headers), adapted to the supply-chain context.
Supply chain requirements compliance map (Article 21(2)(d)) — shows which of your client's supplier security requirements your technical posture satisfies.
A security attestation you can hand to your client — a single document your client can use for their own compliance check.
Discounted renewal with monitoring — if your infrastructure changes, you can renew the attestation more cheaply by joining monitoring.
Fill-in assistant in the portal — step by step, with a manual explanation for every field

ℹ️ Free NIS2 requirements check — Free: A free quick check: we map your company's current state against the ten mandatory measures of NIS2 Article 21(2) and show where the biggest gaps are — a clear starting point before ordering documents or technical measures.

Quick check against the ten Article 21(2) measures (a–j)
Ranked list of gaps with explanations
Recommended next steps for your profile
Instant result, no obligations

Request type

Request a quote

A price inquiry is not binding: we send a personal quote and you decide after receiving it.

Who are you ordering for?

Our own company Our client's company

The following terms apply to your order: Terms of purchase

Contact details

Company registry code Name E-mail Company

Only companies can order: the NIS2 obligation lies with the company. Company name and registration number are required.

VAT number (optional, for EU B2B reverse charge): Phone Country Message (optional)

Select at least one service.

Your package will be prepared based on your own country's transposition law — the structure and scope are the same, only the legal references are specific to your country.

See what you get before you buy

Prices of all services on one page — pricing

What happens after you pay

Your payment is confirmed automatically (Revolut) — there is no manual step.
Your documents are generated automatically from the current knowledge-base version (with source references).
You receive an email with a secure link to your portal, where the documents are available for download (also as .docx).
If generation or email delivery fails, the system retries automatically and alerts our team — you never wait for a human without anyone knowing.
In the portal you can also generate NIS2 art 21(2)(d) demand letters for your suppliers — ready-made letters with legal citations, sent by you in your own name.

Every document is validated by our automated quality gate before delivery — built from your company profile and the details you submit.

Grounded in the verbatim text of your country's NIS2 transposition law.

Every change to the platform passes automated checks before it is accepted.

How it works →

VAT

All prices are net (excluding VAT). Invoices are issued by AIPOS OÜ (Estonia).

For Estonian clients, Estonian VAT is added.
Business clients in another EU country with a valid VAT number (VIES-verified): reverse charge — no VAT is added on the invoice, the invoice carries a reverse-charge reference and you account for VAT in your own country (Art. 196 of the VAT Directive). Without a valid VAT number, Estonian VAT is added.
For clients outside the EU, no Estonian VAT is added.