Free tool · Updated 6 October 2026 · Also available in: Italiano · Français · Deutsch · Svenska · Nederlands · Dansk
In short: Free NIS2 price calculator: tick what you already have, get the cost to cover the remaining Article 21 measures in EUR, line by line, against typical local provider and in-house prices.
October 2026: Italy's ACN measures are due by 31 October, the Netherlands' Cyberbeveiligingswet has applied since 15 August, Germany's NIS2UmsuCG since December 2025 and Sweden's cybersäkerhetslag since January 2026. The Sophos Active Adversary Report 2026 found 88 percent of ransomware encryption starts outside business hours, which is why the duties that cost most are detection, response and reporting.
How it works
- Set your size: Employees, users and endpoints drive the per-user and per-device lines; the SOC bracket follows the published managed SOC pricing.
- Tick what you have: EDR, SOC, SIEM, backup, MFA, training, policies and the rest. Anything ticked drops out of the estimate.
- Read the budget: The teaser shows the monthly and one-off totals and the comparison bars. Unlock the full table with a work email and we send a copy within one business day.
Frequently asked questions
How much does NIS2 compliance cost for a small company?
For a company of about 50 employees that has little in place, the ITSECOPS estimate usually lands between EUR 1,500 and EUR 4,500 per month for SOC, SIEM, EDR, backup and training, plus EUR 8,000 to EUR 25,000 of one-off work for risk analysis, policies, continuity planning and hardening. A company that already runs Microsoft 365 Business Premium with MFA and a backup pays considerably less.
Why is a 24×7 SOC the biggest line?
Article 21 requires incident handling and Article 23 requires an early warning within 24 hours of becoming aware of a significant incident. Both assume someone is watching at 02:00 on a Sunday. A shared SOC costs a tenth of an in-house team, which the comparison bars show.
Are these the final prices?
They are indicative ranges built from the published ITSECOPS prices for October 2026. The written quote, in EUR and within one business day, is exact. Licences are supplied at partner price.
Is the calculator valid outside the EU?
Yes for the measures: Article 21 is the same list in every member state and the UK Cyber Security and Resilience Bill mirrors it. Only the supervisor, the registration portal and the fines differ by country.
Related
NIS2 guide and country pages · Managed SOC pricing in Europe · SIEM as a service · VEDVERA GRC platform · Client testimonials