One annual plan for organisations with at least 50 employees and 20 IT assets. The price depends on headcount, IT assets and the systems to connect: you get it in a free 30-minute demo.
Price On request
Annual subscription + one-time setup fee
Larger organisations, more assets or more complex environments: tailored plan →
The plan, item by item
| Item | Detail |
|---|---|
| Product | Nispo, NIS2 compliance management platform |
| Price | On request: we present it in a demo, based on headcount, IT assets and the systems to connect |
| Structure | Annual subscription plus a one-time setup fee |
| Entry point | At least 50 employees and at least 20 IT assets |
| Beyond the entry point | For larger organisations, more assets or more complex environments: tailored plan |
| Included | NIS2 / ACN control mapping, Automated technical checks, Evidence collection, Compliance dashboard, Gap assessment, Remediation tracking, Audit-ready reporting, Supplier management, NIS2 documentation and templates, Continuous compliance monitoring |
| Not included | Cybersecurity services (penetration testing, vulnerability assessment, vCISO, incident response and others), on quote; licences for security tools such as Microsoft 365 |
| Demo | Free, 30 minutes |
Entry point
These are the thresholds where the Nispo plan starts: at this size an organisation has enough systems, suppliers and responsibilities to make a dedicated platform worthwhile.
The company's IT assets: for example computers, servers, network devices, applications and cloud services.
The 50-employee threshold is Nispo's commercial choice, not the legal definition of who falls under NIS2.
Applicability depends on the sector of activity (annexes of the directive and of Legislative Decree 138/2024), on company size — headcount, but also turnover and balance sheet — and on cases where entities are in scope regardless of size.
A company with fewer than 50 employees can therefore fall under NIS2, and one with more than 50 can be out of scope. The category, essential or important, is notified by ACN.
Essential or important entity? →Beyond the plan
Penetration testing, vulnerability assessment and our other services are not included in the plan: they are purchased separately, as a one-off engagement or alongside the platform. All services →
For larger organisations, more IT assets or more complex environments — for example multiple sites, corporate groups or many systems to connect — the plan is tailored, starting from the demo.
FAQ
The answers are on the FAQ page, together with every other question about Nispo and NIS2.
30 minutes, free: see the platform live and get the price for your organisation. Or a security assessment with our specialists.