FREE TOOL
What does NIS2/CyFun as a managed service earn you?
Enter how many clients you have in each size band, what you charge, your delivery hours and loaded hourly cost, and what you actually pay ECP per client. The tool totals your monthly recurring revenue, margin and delivery hours. It never fills in ECP’s cost for you: you enter what you really pay.
What an hour of delivery time actually costs you (wages, overhead), not what you bill it at.
| Client size band | Clients | Your fee/client/mo | Your hours/client/mo | ECP cost/client/mo |
|---|---|---|---|---|
Nano 1 – 4 Published ECP direct price: €49/mo. Enter what you pay. | ||||
Micro 5 – 12 Published ECP direct price: €99/mo. Enter what you pay. | ||||
Core 13 – 29 Published ECP direct price: €169/mo. Enter what you pay. | ||||
Growth 30 – 49 Published ECP direct price: €229/mo. Enter what you pay. | ||||
Medium 50 – 249 Published ECP direct price: €395/mo. Enter what you pay. | ||||
Large 250 – 999 Published ECP direct price: €750/mo. Enter what you pay. |
Enter a client count and your fee for at least one band to see your numbers.
Your own figures only. The tool never fills in your ECP cost: the number above is what you typed.
See the published direct rate card →How does the revenue math work?
Managed service providers and managed security service providers are named entities under NIS2 Annex I, in the "ICT service management (B2B)" group the CCB folds into Digital Infrastructure [1][2]. So selling NIS2/CyFun readiness is not a side hustle for an MSP. It is a service one sector the law already recognises can sell to another sector the same law reaches.
The calculator groups clients into the same size bands ECP publishes its own direct price in [3]: Nano, Micro, Core, Growth, Medium and Large. For each band it multiplies your client count by your own fee to get revenue. Your hours and your own hourly cost give the delivery cost. What you actually pay ECP (never a figure the tool supplies) gives your ECP cost. Margin is revenue minus both cost lines.
The tool uses the ECP cost you enter, so the margin it shows is your own. The published DIRECT price shown next to each band is only a reference point: what a client would pay buying straight from ECP.
What does a worked example look like?
An MSP with 8 Core clients (13-29 staff) charges each €150/month for NIS2/CyFun readiness as a line item. It spends 1.5 hours/month per client at a €45 loaded hourly cost, and pays ECP €50/month per client (its own negotiated rate, entered by hand). Revenue comes to €1,200/month, the delivery-hours line to €540, the ECP line to €400. What is left over once both cost lines are subtracted, roughly a fifth of revenue here, sits on top of whatever else that client already pays for other services.
Add 5 Medium clients at €300/month. The same per-client ECP cost assumption does not hold, because Medium is priced differently (the published direct price, for reference, is shown next to the row). So each band is entered and totalled separately rather than averaged across the whole book.
Want to know if your own MSP is NIS2-ready? Try the MSP NIS2 readiness check, or triage your whole client book with the portfolio triage tool.
Frequently asked questions
- Does this show ECP’s own margin or discount?
- No. The tool shows no ECP margin or discount. The ECP-cost field is always something you type in from your own invoice, never a number this tool supplies.
- Why group clients by these size bands?
- Nano, Micro, Core, Growth, Medium and Large are the same bands ECP’s own published direct price table uses. So the reference price shown next to each row lines up with what a client would pay buying directly, without this tool inventing a second taxonomy.
- Can I use this for a client-by-client calculation?
- Enter 1 in the count field of the matching band and leave the rest at zero; the totals reduce to that one client. For a one-off NIS2 scope question on a single company, the NIS2 scope check is the more direct tool.
- Is managing NIS2/CyFun compliance itself a recognised MSP service?
- Yes in the sense that MSPs and MSSPs are themselves an NIS2-named sector (Annex I, ICT service management) [1][2], which is why many already sell compliance support as a line item rather than a one-off project.
- Does the hourly cost include overhead?
- It should: enter your loaded hourly cost (wages plus overhead for the technician doing the work), not your billed rate. The fee field is where your billed rate belongs.
Related free tools
- Is your MSP NIS2-ready? 14 questions on the MSP’s own security: privileged access to client systems, RMM hardening, MFA, logging, suppliers, incident reporting, staff training. A score and a fix-first list.
- Client portfolio NIS2 triage Paste or upload a CSV of your clients. See who is likely essential, important, supply-chain exposed or out of scope, sorted by who to call first. Runs in your browser; nothing is uploaded.
- CAB audit cost estimator Pick your CyFun tier and hygiene. See the framework, prep time, audit fee and consultancy buckets, plus a Year-1 total range.
The IT partner guide and rate card · NIS2 field guide for MSPs · For IT partners and MSPs
2026-11-03
Computed with the free tool at https://easycyberprotection.com/learn/tools/msp-nis2-revenue-calculator/, by Easy Cyber Protection.
#CYBERLEARN