Scope My NIS2 Assessment

Get Started

Request a Threat Assessment

Tell us about your environment and we'll come back with a scoped engagement proposal — no generic packages, no obligation.

What happens next

  1. 01

    We review your request

    A senior engineer reviews your environment details within one business day.

  2. 02

    Scoping call

    A short call to understand your systems, timeline, and objectives — under NDA.

  3. 03

    Proposal & scheduling

    A tailored proposal with pricing and timeline, ready to schedule when you are.

1 business day

Average response time to new assessment requests.

NDA-first

A mutual NDA is signed before any scoping details are shared.

No obligation

Scoping calls are consultative — you decide if and when to move forward.

Not ready to talk yet?

Check your NIS2 & CRA exposure first — a free, 12-question self-assessment with an instant result.

Take the Readiness Check
Services of Interest

Before You Submit

Questions we get on every scoping call.

Will testing disrupt our production systems?

Testing windows and rules of engagement are agreed with you before any active testing begins — that's step one of the process below. Engagements are scheduled around your traffic patterns and change windows, not ours.

What happens to our data during the engagement?

A mutual NDA is signed before any scoping details are shared. Engagement data is scoped to the specific engineering team assigned, on a need-to-know basis, and all findings are encrypted in transit and at rest and delivered through an access-controlled portal.

Who owns the report afterward, and is it ever shared?

The report and every finding in it are yours. It's delivered through the access-controlled portal above and is never referenced or reused for another client.

Can we see a sample report before we commit?

Ask during your scoping call — we're glad to walk through a redacted example so you know exactly what to expect before you decide anything.

Is retesting included if you find something critical?

Yes. Every critical and high finding is retested at no additional cost until remediation is confirmed.

How long does an engagement actually take?

It depends on scope — a focused web application test can run days, a full red team engagement runs weeks. Your proposal will include an exact timeline before you're asked to commit to anything.