IN THE PROJECT
Included with NIS2 as a Service
During our collaboration you work on my instance. Afterwards you can continue to use it or take over your data.
NIS2 as a Service →Home / Software & Licences
SOFTWARE & LICENCES
Tools that make compliance work in everyday practice
An ISMS for implementation, two cockpits as reference and working tools, and free self-checks to get started. All built to the standard I apply as an auditor: traceable and verifiable.
RECOMMENDED FOR IMPLEMENTATION
open-isms: the ISMS for NIS2 and more
I use open-isms in my NIS2 projects. Every requirement gets an owner, a deadline and an approval; an immutable audit log provides the evidence auditors want to see.
Because the software is open source (AGPL-3.0), you keep control of your data and are not tied to a vendor.
- Asset inventory and risk assessment
- Supplier questionnaires and portal
- Incident recording in reporting format
- Policies, internal audits, management reviews
- Training with certificates
- One piece of evidence for several frameworks
REQUIREMENT CATALOGUES
Included today
| Framework | Requirements |
|---|---|
| NIS2 | 49 |
| ISO/IEC 27001:2022 | 116 |
| EU AI Act | 24 |
| Cyber Resilience Act | 21 |
| GDPR | 9 |
Further requirement catalogues are planned: DORA, BSI Grundschutz++ and ISO 22301 (BCM).
How to use open-isms with me
OPERATED BY ME
Hosted in Germany
Your own instance on my server in Germany, with updates and data backup. Price on request.
Enquire →AT YOUR SITE
Set up in your infrastructure
I set up open-isms with Docker on your servers, hardened and documented. Your data never leaves your premises. Fixed price on request.
Enquire →LICENSED PRODUCTS
Cockpits and Supplier Portal: law, measures and evidence
The cockpits run offline in the browser, without installation and without a cloud; the Supplier Portal runs on your web space or as SaaS in the EU. Ideal for ISOs, compliance, internal audit and consultants.
NIS2 Cockpit++
NIS2 Directive, Implementing Regulation (EU) 2024/2690 and the amended BSIG with implementation guidance from ENISA and BSI.
- Applicability check and legal navigator
- 197 measures with legal reference
- BSI Grundschutz++ and 49 chapters based on ENISA
- Reporting obligations, evidence, export
DORA Cockpit
The counterpart for the financial sector: DORA requirements, target measures and evidence in one place.
- Legal navigator: DORA linked with RTS, ITS, guidelines and Q&As
- Target measure catalogue for Art. 5–15 with processing status
- Register of Information and management of ICT third-party providers
NEW · ALSO AS SAAS
Supplier Portal
Suppliers complete the security questionnaire on NIS2, DORA and CRA once and share their profile with every customer via link.
- 72 fields with legal basis plus DORA module with Register of Information
- Cockpit, certificates, SBOM, structured incident reports
- Own web space or SaaS in the EU
Licences and prices
Company-wide licence. The price depends on the number of employees, not on the number of users. Applies per cockpit. Prices for the Supplier Portal (also as SaaS) on the product page.
Small companies
1–10 employees
€590 net
€702.10 incl. 19% VAT
Medium-sized companies
11–1,000 employees
€3,400 net
€4,046.00 incl. 19% VAT
Large companies
over 1,000 employees
€4,900 net
€5,831.00 incl. 19% VAT
Special licences
Purchase on account, groups of companies, software vendors, consultants
by arrangement
Perpetual licence for the purchased version. New versions and updates are available for a fee.
FREE SELF-CHECKS
Where do you stand? Find out in a few minutes.
The evaluation runs entirely in your browser. Your answers only leave your computer if you explicitly send me the result.
EU AI Act Compliance Assessment
Risk class of your AI systems and the resulting obligations.
Start assessment →
Cybersecurity Self-Assessment
NIS2 readiness: governance, risk, incident response, patch management.
Start self-check →
DORA Proportionality Calculator
Which requirements apply to your institution, and to what extent?
Open calculator →
FREQUENTLY ASKED QUESTIONS
Good to know
What is the difference between open-isms and the cockpits?
open-isms is the ISMS for implementation in a team: requirements, owners, deadlines, evidence and audit log. The cockpits are reference and working tools for NIS2 and DORA respectively, with legal navigator and catalogue of measures, usable offline in the browser.
Is the licence perpetual?
Yes. You acquire a perpetual company-wide licence for the purchased version; the price depends on the number of employees, not the number of users. New versions and updates are available for a fee.
Where is my data stored?
The cockpits run offline in your browser, without a cloud. I operate open-isms on my server in Germany or set it up in your own infrastructure.
Can I buy on account?
Yes. You receive a quote and, on request, an invoice instead of online payment. Special licences are available for groups of companies, software vendors and consultants.
Can I see the software beforehand?
There is a free preview of NIS2 Cockpit++. For open-isms and the Supplier Portal I am happy to give you a demo.
LICENCE ENQUIRY
Request a licence or operation
You receive a quote and, on request, an invoice instead of online payment.