FREE TOOLS
Free NIS2 & CyberFundamentals tools, built for MSPs to use with their clients
Every tool below answers one concrete question (scope, cost or readiness) with the result shown on screen, free, no email required. An email is only ever asked to receive a PDF copy.
Scope
- NIS2 scope check Sector, size and a supply-chain step: see in about two minutes whether a company is an essential or important NIS2 entity, or out of scope, and which customer sectors push requirements down anyway.
- NIS2 board duty memo What a company’s management body itself must approve, oversee, train for and answer for under the Belgian NIS2 law. A one-page memo to print or email, for essential and important entities.
- CyFun level check Pick a sector and company size to see which CyberFundamentals (CyFun) level applies: Basic, Important or Essential, with the control count for each.
Cost & consequence
- Incident reporting clock Enter when you found out about a cyber incident. Get every Belgian NIS2 reporting deadline to the CCB, plus the GDPR 72-hour deadline, to the minute.
- NIS2 fine calculator Pick what the Belgian NIS2 law makes your company and enter your group turnover. See the highest fine it allows.
- NIS2 deadline wall Every dated Belgian NIS2 obligation (registration, incident reporting, essential-entity conformity assessment) sorted into passed and upcoming, filterable by entity type, each sourced.
- CAB audit cost estimator Pick your CyFun tier and hygiene. See the framework, prep time, audit fee and consultancy buckets, plus a Year-1 total range.
- Ransomware downtime cost calculator Enter your staff count, hourly cost and days down. See what a ransomware attack would cost your company, per day and in total, with the formula shown.
- Your Monday after the attack An hour-by-hour scenario from the first alert: the choices you face, what each one costs you, and the NIS2 clock running underneath.
Readiness
- CyFun readiness quiz 19 plain questions covering the 34 controls of CyberFundamentals (CyFun) 2025 Basic. A score and a fix-first list, no email needed.
- CyFun effort estimator Pick a CyFun level and your starting hygiene. See how many weeks preparation typically takes, from 4 weeks for Basic to 36 for Essential.
- Cyber insurance readiness check The controls insurers commonly ask about: MFA, backups, EDR, patching, training, an incident plan. See your likely gaps, mapped to CyFun controls.
- Phishing: spot the fake 10 rounds of real-or-fake, built from the public warnings on safeonweb.be: itsme, bpost, the tax authority, your bank, invoice fraud and CEO fraud.
MSP business
- MSP NIS2 revenue calculator Enter your client mix by size, your fee, your delivery hours and cost, and what you pay ECP. See your monthly recurring revenue, margin and hours.
- Is your MSP NIS2-ready? 14 questions on the MSP’s own security: privileged access to client systems, RMM hardening, MFA, logging, suppliers, incident reporting, staff training. A score and a fix-first list.
- Client portfolio NIS2 triage Paste or upload a CSV of your clients. See who is likely essential, important, supply-chain exposed or out of scope, sorted by who to call first. Runs in your browser; nothing is uploaded.