NIS2 is in active enforcement in most EU member states. Directors can be personally liable for non-compliance. Get your readiness report →
NIS2Ready logoNIS2Ready
NIS2 gap analysis · EU SMEs · 50–500 employees

Is your company NIS2-ready? Find out in 30 minutes, not 3 months.

A guided 45-question assessment across 15 regulatory domains, mapped to Article 21 of the NIS2 Directive, with a scope check for all 27 member states. You get an instant score and a professional gap analysis report with a costed action plan, generated and delivered automatically.

€349 one-time · no subscription · no login · no software to install

€10,000+what consultants charge for a NIS2 assessment
€7M · 1.4%max fine for important entities (Art. 34)
30 minyour time to complete the assessment
160,000EU entities estimated in scope (16× NIS1)
The problem

NIS2 is not optional. Most SMEs don't know where they stand.

Enforcement is active: Germany's registration window with the BSI has closed, the Netherlands' Cyberbeveiligingswet entered into force on 15 August 2026, and the Commission referred four member states to the Court of Justice in July 2026.

01

Fines are GDPR-scale, and managers are liable

Up to €10M or 2% of global turnover (essential entities) and €7M or 1.4% (important). Unlike GDPR, NIS2 makes management personally liable: fines can be directed at executives themselves (Art. 20).

Art. 34 · max fines
02

You're likely in scope

50+ employees and €10M+ turnover in Annex I or II sectors, or a supplier to someone who is. IT services and managed service providers sit in Annex I, high criticality.

Annex I · II
03

Customers will ask

In-scope companies must manage supplier risk (Art. 21(2)(d)). Your large clients will request NIS2 evidence in contract renewals.

04

Deadlines are real

23 of 27 member states have transposed. The "wait and see" window is closing. Registration deadlines are passing, not coming.

05

Ignorance is not a defense

You don't need to be perfect. You need demonstrable progress. A documented gap analysis is the first evidence of good faith.

06

"I don't know where to start"

The directive is 30+ pages of legalese; enterprise platforms cost €850–4,800/year and are built for teams that already have compliance. We meet you at the start: one structured questionnaire, one report, one price.

Check your readiness, free →

What this is

A professional service, not another tool.

You receive a document you can act on and show to your board, insurer, auditor and customers.

Not a platform

No login, no dashboard to maintain, no subscription for the fixed-scope report, no implementation project. Your IT team doesn't touch a single configuration.

Not a certification

It's a gap analysis: the documented starting point. Certification comes later with an auditor. You'll arrive prepared.

Not a €10k engagement

Fixed price, delivered automatically in minutes after you submit your answers. The report is written for your company, not generic output.

Not legal advice

We map your posture against Article 21 and your national law, and we tell you exactly where to confirm with your authority.

How it works

Thirty minutes of your time. Your report, automatically.

Answer honestly: the report is only as useful as your answers.

1

Take the assessment

45 questions across 15 regulatory domains. Score is instant.

2

Choose your report

Gap Analysis Report (€349) or Compliance Pack (€599). One-time purchase, no subscription.

3

Receive it automatically

PDF with score, per-domain gaps, evidence indications, and a prioritized 0–30 / 1–3 / 3–6 month action plan. Generated and delivered by email within minutes of submitting.

4

Act and show progress

Use it with your board, insurer or customers. Re-assess anytime to evidence continuous improvement.

See it in 30 seconds

What NIS2 means for your company

And how to fix it fast.

Inside the €349 report

This is the document you receive.

Four pages of the report, at a glance. See the full sample report for the complete document.

Page 1Executive summary
30/100
Critical readiness

Readiness score · scope determination · max fine exposure · bottom line for the board. Example from the sample report.

Page 2Category scores
Risk & policy89
Incident handling33
Continuity22
MFA & comms44
Page 3Action plan
Quick wins0–4 wks
Short term1–3 mo
Strategic3–12 mo

Every action with effort and cost estimate.

Page 4Roadmap & cost
M1 → M1230 → 70+
Est. remediation€8–20k
ISO crosswalk✓
See the full sample report → rebrandable PDF · delivered automatically · evidence not independently reviewed
Methodology

Built around Article 21, not a generic quiz.

Every question maps to a specific requirement of the directive. Scoring is structured and documented, so the report holds up when an auditor, insurer or customer reads it.

15 regulatory domains

(a)Risk analysis & policy
(b)Incident handling
(c)Business continuity
(d)Supply-chain security
(e)Secure acquisition & development
(f)Effectiveness assessment
(g)Cyber hygiene & training
(h)Cryptography
(i)HR security & access
+Governance, notification, registration, physical security & supply-chain governance
1

30-minute assessment

Structured questions plus a scope check by country and company size.

2

Structured scoring

Weighted 0–100 per category, documented in the report.

3

Gap analysis

Requirement → your current state → what's missing → risk of inaction.

4

Prioritized plan

Quick wins first, with owners and deadlines, and a 0–30 / 1–3 / 3–6 month action plan.

Start the assessment, free →

Who this is for

Built for companies that need an answer, not another project.

IT / Security

Know what needs fixing

Prioritized gaps with effort and cost, so a small team knows exactly where to start.

Management

Board-ready view of exposure

One score, one document, personal liability understood.

Procurement / Sales

Keep the contracts

Show customers a documented remediation plan when they ask for NIS2 evidence.

MSPs / Consultants

A starting point

Use the assessment to scope remediation work for your own clients.

Pricing

One-off reports. No subscription.

Start with the free assessment. Buy the Gap Analysis Report or the Compliance Pack when you are ready; each purchase is a single payment.

Self-Assessment
€0
Know where you stand in 30 minutes.
  • 45 questions across 15 regulatory domains
  • Scope check for all 27 member states + EEA
  • Instant score /100 across 15 domains
  • No email wall, no login
Start free
Gap Analysis Report
Most chosen
€349
The report you can show your board, insurer, or customers.
  • 45 questions across 15 regulatory domains
  • Scope check for all 27 member states + EEA
  • Instant score /100 across 15 domains
  • No email wall, no login
  • Gap analysis of 15 regulatory domains, with legal references
  • Question-by-question findings: your answer + expected maturity + a recommended starting point for every control
  • Prioritized 0–30 / 1–3 / 3–6 month action plan
  • Professional PDF report (~38 pages, with answer and evidence appendices)
  • Evidence preparation guide, with self-reported items clearly marked
  • Rebrandable PDF, delivered automatically
  • Material report errors corrected free of charge
Buy report: €349
Compliance Pack
€599
The report plus 7 policy documents personalized for your company, your country and your gaps.
  • 45 questions across 15 regulatory domains
  • Scope check for all 27 member states + EEA
  • Instant score /100 across 15 domains
  • Gap analysis of 15 regulatory domains, with legal references
  • Question-by-question findings: your answer + expected maturity + a recommended starting point for every control
  • Prioritized 0–30 / 1–3 / 3–6 month action plan
  • Professional PDF report (~38 pages, with answer and evidence appendices)
  • Evidence preparation guide, with self-reported items clearly marked
  • Rebrandable PDF, delivered automatically
  • Material report errors corrected free of charge
  • 7 personalized documents: security policy, incident response, access control, backup & recovery, 24h/72h notification template, supplier clauses, cyber hygiene
  • Each document opens with your own gap scores and closes with an implementation checklist
  • Adoption guide: fill in → approve → apply → record, ordered by your weakest domains
  • Coverage matrix: gap → control → document → first action
Buy pack: €599

VAT per EU rules (reverse charge for B2B with valid VAT number) · VAT invoice included with every purchase

Prefer to delegate? See our partners, the consultancies and MSPs delivering NIS2 readiness with NIS2Ready.

Partner Program

For MSPs, IT providers and consultants

Every one of your clients will need to answer the NIS2 question. Use our platform as your assessment layer: buy at partner prices, sell at yours, keep the client relationship and the remediation hours. We never compete with you for implementation work; finding the gaps is our job, fixing them is yours.

Partner wholesale
from €130 / key
Monthly plans by number of keys (5 to 50), with a 6 or 12 month commitment paid in advance. Generate keys yourself on the partner portal.
  • Gap Analysis key: €130 to €190 depending on the plan; Compliance Pack: €221 to €323
  • 12-month commitment: pay 10 months (2 months free)
  • Extra keys beyond your plan credit, always below retail
  • Client dashboard: register clients, assign keys, re-download reports
  • You set your resale price (retail: €349 Gap / €599 Pack)
Become a partner
What partners get
Built for resellers
Tools, not just keys
  • Partner portal: apply, get approved, create keys and track usage per client, all self-service
  • Monthly plans by number of keys, 6 or 12 month commitment paid in full in advance
  • Sales kit: one-pager, prospecting email, objection handling
  • Your clients' gaps become your remediation pipeline, handed over documented
  • Listed on our partners directory (optional, with your consent)
About the program
FAQ

Questions you'll ask before buying

Is my company actually in scope of NIS2?

NIS2 covers "essential" and "important" entities: broadly, companies with 50+ employees and €10M+ turnover in sectors like energy, transport, healthcare, digital infrastructure, manufacturing, food, and IT services. If you're a supplier to those sectors, you're likely expected to comply too. The assessment tells you if you're in scope.

Is this a legal or compliance consultancy?

No. We're not a law firm and this isn't legal advice. We provide a practical, structured gap analysis based on Article 21, so you can see where you stand and where to focus. For formal certification, you'd engage your national authority or a certified auditor. You'll go in prepared.

How is this different from hiring a consultant?

Know where you stand before paying thousands for remediation. In 30 minutes you get an instant score, and minutes after submitting your answers a documented gap analysis with a prioritized action plan, so you can target your budget where the report shows it matters.

What do I actually receive?

A professional PDF report (rebrandable for internal use) with: your overall score, per-domain scores, concrete gaps, evidence indications marked as self-reported/not reviewed, and a prioritized 0–30 / 1–3 / 3–6 month action plan.

Is my data safe?

Yes. Your answers are used only to generate your report and are never sold or shared. We delete your data on request after delivery (GDPR).

Can I re-take the assessment later to show progress?

Yes, any time, free. Many customers run it quarterly to demonstrate continuous improvement to their board or customers.

What if the report doesn't help me?

The report is a fixed-scope digital deliverable. If it contains a material error attributable to us, we correct it free of charge. If you cancel before submitting your assessment answers, you are entitled to a full refund; once the deliverable is received, the service is considered performed subject to applicable law.

Which national NIS2 law applies to me?

NIS2 is transposed nationally: Germany (NIS2UmsuCG, BSI registration deadline already passed), Netherlands (Cyberbeveiligingswet, in force since 15 August 2026), Portugal (DL 125/2025), and all other member states. The assessment's scope check tells you which law applies and what to do first.

What happens after I pay?

You immediately receive a confirmation email with your personal assessment link (45 questions). Once you submit your answers, your report is generated and delivered automatically by email within minutes, together with your VAT invoice. Material report errors attributable to us are corrected free of charge.

Can this replace an auditor or certification?

No. This is a gap analysis: the documented starting point. Formal certification still requires a certified auditor or your national authority, but you'll arrive prepared, with the evidence trail already structured.

Do I need to install software or create an account?

No. The assessment runs entirely in your browser, on any device, without an account. Your answers stay on your machine until you choose to send them to us for the report.

What happens next

Low risk, clear process.

After you pay

  • Confirmation email with your assessment link (30 min)
  • Your answers are scored and analyzed automatically
  • Report delivered by email within minutes of submitting
  • Proper VAT invoice, included automatically
  • Material report errors attributable to us corrected free of charge

Your data

  • Your answers are used only to prepare your report
  • Never sold, never used for advertising
  • GDPR: deletion on request after delivery
  • Assessment runs in your browser: no account, no install
  • Data stored on EU/EEA infrastructure where possible

Full details: Privacy Policy · Terms of Service

Who we are

Built by Saevelis. Operated by one person. No sales team, no call center.

NIS2Ready is operated by Saevelis, an independent consultancy based in Portugal, led by Marcos Leite. The product is deliberately automated: you answer, the system scores, the report is generated and delivered by email. That is why the price is €349 instead of €10,000.

Nothing here is outsourced to AI-generated claims: the assessment is mapped to Article 21 of Directive (EU) 2022/2555 and to each member state's national transposition, with the applicable authority named in every report.

OperatorSaevelis (consultancy)
JurisdictionPortugal, EU
Legal pagesPrivacy · Terms
The window is closing

The report is 30 minutes away.

Take the free assessment now and see your score instantly. No commitment, no email wall.

Take the free self-assessment →

nis2.saevelis.com · mfleite@saevelis.com