Start NIS2 for free on CyFun® BASIC
Check whether you are in scope in two minutes, then start the measures today with Secrato's free NIS2 Starter - and grow into CyFun® IMPORTANT or ISO/IEC 27001 when you need to.
Most medium-sized companies in a listed sector are in scope
NIS2 applies from medium size - 50 or more staff, or turnover and balance sheet both above €10 million - in one of the listed sectors. In Belgium you can start free with the NIS2 Starter on CyFun® BASIC, and grow into CyFun® IMPORTANT or ISO/IEC 27001 later.
Compliance made simple - and free to start.
Everything in the free NIS2 Starter
A clear, guided baseline for a small team - set up in minutes, with the room to grow into more frameworks later.
34 controls, maturity 2.5
The recognised Belgian baseline, each control with status, owner and evidence.
NIS2 incident reporting
Built-in notifications to the CCB, so a small team knows exactly what to report and when.
One user, one workspace
Free to start - request your place and get going without hiring consultants for every question.
Grows with you
Move to CyFun® IMPORTANT, ISO/IEC 27001 or more frameworks on a paid plan - controls and evidence are reused.
Do you need it? Check your NIS2 scope
Nothing you enter is sent or stored - the check runs in your browser, based on the NIS2 sectors (Annex I/II) and the EU size definition.
Need the detailed check (group rules, special entity types, per-country next steps)? Use the full NIS2 scope checker.
NIS2 Starter, answered
The things teams ask before they start - straight answers, no jargon.
Is the NIS2 Starter really free?
Yes. The NIS2 Starter runs on CyFun® BASIC and is free in early access - one user, one workspace, no card and no consultant needed to get going. When you need more, you move to a paid plan and keep everything you have built.
What is CyFun® BASIC?
CyFun® (Cyber Fundamentals) is the framework from the Belgian Centre for Cybersecurity. BASIC is its entry assurance level - 34 controls at maturity 2.5 - and the recognised baseline most organisations use to start meeting NIS2.
How do I know if NIS2 applies to me?
Two things decide it: your size (from 50 staff, or turnover and balance sheet both above €10M) and your sector (the NIS2 Annex I/II lists). Use the quick check above for an instant read, or the full NIS2 scope checker for group rules and special entity types.
Does the free Starter cover incident reporting?
Yes. NIS2 notifications to the CCB are built in, so a small team knows exactly what to report and when - without stitching together spreadsheets and e-mail.
What happens when I outgrow BASIC?
You grow without starting over. Move up to CyFun® IMPORTANT, ISO/IEC 27001 or more frameworks on a paid plan, and the controls and evidence you already captured are reused - no re-work, no second tool.
Is the scope result a formal determination?
No. The check is indicative and not legal advice. It points you to the right starting level quickly; a formal determination depends on your full situation, and we are happy to help you get there.
Request your place in the free NIS2 Starter
Leave your work e-mail and we will set up your access and send a short readiness overview for your sector and size.
- CyFun® BASIC - 34 controls, maturity 2.5
- NIS2 notifications to the CCB
- Free in early access - one workspace
