A client forwards you a security questionnaire. Two weeks. Nobody owns it.

White-label NIS2/CyFun compliance platform for MSPs

That is NIS2 arriving through your clients. We are the white-label platform that answers it: CyFun mapping, evidence, audit-ready reports under your logo. From €95 to €750 per client per month, no new hires.

See the demo Book a 20-min call

One click, no signup. You land in a demo client's file, 34 CyFun controls already filled in.

And after that?
  • The environment is shared and resets every 6 hours, so you cannot break it.
  • Devices, evidence and integrations are already in place, the way a real client looks.
  • Prefer the call? 20 minutes with Tom, on your own client mix. Nothing to prepare.

What actually happens

Day 1. You connect the client's Microsoft 365. The platform shows what a CAB auditor would find today.
Then. On a real client, an intern who knew nothing about this brought 31 of 34 controls to audit-ready, about a day a week over roughly 11 weeks.
Not us. The securing itself, MFA, backups, firewalls, and the policy calls stay your work. Audit-ready means evidence a CAB auditor would accept, not a passed audit.

Estimate by a senior CyFun consultant, based on real demos. · Real client (anonymized), ECP Audit Readiness view. Audit-ready means evidence a CAB auditor would accept, not a passed audit. The platform shows what to fix and drafts the documents; the securing (MFA, backups, firewalls) and the policy decisions stay human work, mostly done off it. See the measured data

NIS2 and CyFun: the new rules your clients don't know about yet

Since 2024, an EU law, NIS2, makes a lot of companies prove they're properly protected against hackers. Each country turns it into its own national law. It reaches your clients faster than they think:

Four words you'll see on this page, and what they mean:

You're their IT provider. They already trust you and you already have access to their systems. This isn't a new company they need to get to know, it's just the next thing you already do for them.

Not ready to talk yet? Grab the free MSP Launch Kit first .

Two people walking on a beach, relaxed

No extra hires. No extra stress.

Not a new department, just what you already do for your clients, sold differently.

What actually lands on your desk

Here's the honest split, so nothing surprises you after you say yes. The platform is a scoreboard, not a gym. It shows you what's missing. It doesn't do the securing for you.

What the platform does

  • Shows you exactly which controls are still missing.
  • Tells you how to fix each gap.
  • Drafts the policy documents for you to review.
  • Lets you re-check your progress any time.

What stays your work

  • Turning on MFA.
  • Installing firewalls.
  • Running the backup drill.
  • Gathering the proof an auditor will want to see.
  • Deciding what each policy actually says. That's a judgment call, not a checkbox.

Neither half is small. Expect real time on both sides. The securing work is the same MFA, firewall and backup work you already do for clients. Nothing new to learn there.

One fee per client. No base fee, no modules.

Set by that client's number of employees. Every CyFun level is included, Small through Essential, and moving between them costs nothing. This is what the end client pays.

Micro · 1 – 9 employees at that client

Per month €84
Per year €1,008

Small · 10 – 49 employees at that client

Per month €172
Per year €2,064

Medium · 50 – 249 employees at that client

Per month €348
Per year €4,176

Large · 250 – 999 employees at that client

Per month €660
Per year €7,920

Enterprise · 1,000+ employees at that client

Per month On request
Per year On request

Plus €400 onboarding, once. That is for you, not per client: one guided session where we walk through the platform together. All amounts excluding VAT.

Reselling this to your clients?

Partners buy below the rates above and invoice their own client under their own brand. We don't publish the partner rates, because your clients read this page too. One rate card, the same for every partner, not negotiated. Ask for it and you'll have it the same day.

Onboarding is one-time, for you, not per client. A guided session where we walk through the platform together. You won't pay it again for every new client.

Get the free MSP guide Or request the partner rates

48 pages, free. Your work email, and the PDF arrives straight away. Rather look first? The opening chapters are there without giving anything.

Questions MSP owners ask

Do I need compliance expertise?

The platform doesn't replace your judgment: it removes the busywork around it. Control mapping, evidence intake, gap detection, and audit packs are automated. You apply judgment to scope, risk acceptance, and evidence quality. Solo CyFun consultants tell us this cuts roughly 40–50% of their per-client hours.

What do my clients see?

Your branding. Your logo on every report, every email, every page. They see you as the compliance expert.

Can I set my own price?

Yes. We charge you per client. What you charge your client is entirely up to you.

How do we get started?

Schedule a 20-minute call with Tom. He walks you through the platform, configures your first client together, and you go live the same week. No contract, no commitment.

What does "audit-ready" mean?

It means your client has documented evidence of security controls aligned with the CyFun framework. The actual audit is done by certified CAB auditors, not by us or you.

How does pricing work?

One fee per client, by size, shown in the table above, plus a one-time €400 onboarding for you. No monthly base fee. Rates are quoted per month and invoiced a year at a time, so you get one invoice instead of a small one every month. Bigger books can be invoiced more often, just ask. You set your own price. The table above is what an end client pays, so treat it as a suggested retail price: an anchor, not an obligation. Charge what your market bears, and the room between the partner rate and that price is meant to be generous. Want a human involved too? AI support is in the licence. Above it, optional: guidance at €400 a quarter, then async advisory at €1,500 a month, half-time at €4,500, or a consultant one day a week at €7,000.

Are there subsidies available?

Yes: each Belgian region runs its own programme, scoped to where the end-client is established. Flanders: VLAIO kmo-portefeuille, restricted to cybersecurity advice since 1 February 2026, covers 45% of advisory costs for small firms and 35% for medium, capped at €7,500 a year, and only through a VLAIO-registered service provider. Wallonia: the Chèque cybersécurité via Wallonie Entreprendre covers 75% excluding VAT through a certified provider, the work must be done within 12 months of approval, and there is an absolute ceiling of €50,000 excluding VAT per beneficiary over three years. Brussels-Capital: the hub.brussels Prime Digitalisation covers IT-security work, up to €10,000 per calendar year and a maximum of two missions a year. Your client applies in their own region.

Turn NIS2 into recurring revenue. No new hires.

See it live in 20 minutes, or explore the demo yourself.

Tom Janssens

"I personally onboard every MSP partner to ensure we're the right fit."

Tom Janssens, Founder

20+ years across IT and innovation management, including Eurocontrol (the organisation behind European air traffic) and Belgian SMEs.

See the demo

Or get in touch: