NIS2/External audit
ONE-TIME AUDIT INDEPENDENT

The NIS2 external audit.

A one-time, independent external review of your attack surface against the technical NIS2 risk-management measures (Art. 21) - delivered as a documented report with a management summary and prioritised remediation. The baseline you can put in front of auditors and your board.

Book the audit → One-time 490 EUR net. Fixed scope.
✓Thank you - your order is confirmed. You will receive a confirmation email, and we will contact you within one working day to confirm the scope.
Payment cancelled - nothing was charged.
01

What the audit covers

The full outside-in view of your organisation, measured non-intrusively and mapped to the parts of NIS2 Art. 21 that can be verified externally.

Full asset discovery
Every domain, subdomain, IP and host that belongs to you - including shadow IT and forgotten assets.
Perimeter & services
Open ports, exposed services and admin interfaces, TLS and security headers, mail and DNS posture.
CVEs incl. KEV
Version-based CVE matching against NVD and the CISA KEV catalogue of actively exploited flaws.
Mapped to Art. 21
Findings mapped to the externally measurable NIS2 measures, with a traceable 0-100 rating and evidence.
02

What you receive

✓
External audit report (PDF)
Every finding with evidence and a specific fix, prioritised by exploitability, mapped to NIS2 Art. 21.
✓
Management summary
A one-page, board-ready summary with the rating and the top risks - something leadership can act on.
✓
Prioritised remediation plan
A clear order of what to fix first, with the concrete steps per issue.
✓
30-minute review call
We walk your team through the findings and answer questions.
✓
Free re-check after 4 weeks
A second scan to confirm the fixes landed - documented for your records.
03

Price

ONE-TIME
690 €490 €net
Launch price - save 200 €
Fixed scope: up to 5 root domains and all discovered hosts. Report, management summary, remediation and a 30-minute review call.
Book the audit →
OR CONTINUOUS
€69/ month
Prefer continuous coverage? Nightly Audit + Seal scans your perimeter every night with a morning report - the recurring complement to the one-time baseline.
See Nightly Audit + Seal

Book now

Enter your main domain and email. You pay securely via Stripe and receive an invoice with VAT. We confirm the scope with you within one working day.

Prefer to talk first? [email protected]

Prices are net, plus VAT. Larger scope or a tight deadline? Ask us - we scope it with you.

04

Frequently asked

How is this different from the free check?
The free check is an automated passive preview. The external audit is a scoped, documented engagement with a report mapped to NIS2 Art. 21, a management summary, a review call and a re-check.
Is it intrusive?
No. It uses the same non-intrusive, outside-in measurement as our platform - no exploitation, no login attempts, no load.
Does it make us NIS2 compliant?
No. It covers the external, technical side (Art. 21). NIS2 compliance also covers organisation, processes and reporting. The audit is the technical building block and the evidence for it.
How long does it take?
Typically within one working week from scoping to report, depending on the size of your attack surface.

Get your NIS2 baseline.

Request the external audit, or start with the free check to see your exposure in two minutes.

The NIS2 external audit covers the external, technical side of risk management (Art. 21). It is not legal advice and does not by itself establish NIS2 compliance, which also covers organisation, processes and reporting. We scope and confirm every engagement in writing before it starts.