A structured compliance engine that assesses your organisation across all 13 NIS2 domains, scores your maturity on the ENISA 0–4 scale, and generates a prioritised gap analysis report — in under 30 minutes.
4 critical gaps identified across
13 NIS2 compliance domains
The engine adapts to your answers. Low scores trigger deeper follow-up questions. High scores move on. Every report is different because every company is different.
Sector, size, countries, IT team. Shapes every recommendation.
70+ questions across 13 domains. Branches based on your maturity level.
Describe what you have in place. Our engine reads your evidence notes.
Our ENISA-aligned scoring engine generates sector-specific findings mapped to Article 21.
Gap register, roadmap, quick wins. Sent to your email.
Traditional NIS2 consulting takes 4–6 weeks and costs €10,000–€50,000. The SerafinIT engine delivers 80% of that analysis in 30 minutes — with findings your board can act on the same day.
The same scale regulators use. Initial → Managed → Defined → Quantitatively Managed → Optimising. Know exactly which level you are at and what the next level requires.
A hospital gets different guidance to a food manufacturer. The engine reads your company profile and evidence notes and produces analysis specific to your sector and jurisdiction.
Every identified gap mapped to its specific Article 21 obligation, with severity rating, recommended action, owner field, and target timeline. Ready to take to your board.
Critical (0–30 days), High (1–3 months), Medium (3–6 months). Every action includes the specific NIS2 article it addresses. Start with what matters most.
Enter your email before the assessment starts. Your full report is sent automatically — no risk of losing it, no need to save anything during the session.
Traditional NIS2 consulting starts at €10,000. The engine gives you 80% of the analysis for €690 — with the option to add human validation if you need it.
Need a VAT invoice? You will be able to request one after payment. · Secure payment via Stripe.
NIS2 registration is a separate obligation from compliance. Once you know you are in scope, you must register with the competent authority in each member state where you operate. Here are the key authorities for SerafinIT's primary markets.
Authority: State Agency for National Security (DANS) — cybersecurity division
Sectors: All Annex I and II entities operating in Bulgaria
Status: Transposition in progress — monitor national legislation
www.dans.bg →Authority: Agenzia per la Cybersicurezza Nazionale (ACN)
Sectors: All Annex I and II entities — NIS2 in force since October 2024
Status: Transposed ✓ — registration deadline passed March 2025
www.acn.gov.it →Authority: Bundesamt für Sicherheit in der Informationstechnik (BSI)
Sectors: All Annex I and II entities — NIS2UmsuCG enacted December 2025
Status: Transposed ✓ — BSI registration deadline April 2026
www.bsi.bund.de →Authority: Agence nationale de la sécurité des systèmes d'information (ANSSI)
Sectors: All Annex I and II entities
Status: Transposition in progress — expected 2026
www.ssi.gouv.fr →Authority: Rijksinspectie Digitale Infrastructuur (RDI) + sector-specific authorities
Sectors: Sector-specific — health under IGJ, energy under ACM, etc.
Status: Transposed ✓ — Cyberbeveiligingswet in force
www.rdi.nl →Authority: Centre for Cybersecurity Belgium (CCB)
Sectors: All Annex I and II entities
Status: Transposed ✓ — in force since October 2024
ccb.belgium.be →Operating in a country not listed above? See the full NIS2 knowledge hub →
The assessment is free to start. No registration, no credit card, no commitment. Complete all 13 domains and see your maturity score — then decide if you want the full report.
Full report €690 + VAT · Delivered to your email · 30-day access