NIS2 audits start 2026-06-30. See where your domain stands in 60 seconds.
EU and EEA member states finished transposing NIS2 into national law in late 2025; first competent-authority audits land 2026-06-30. Vysiro scans the technical controls NIS2 names directly - email authentication, DNS integrity, transport security, supply chain - and produces an evidence pack mapped to the specific articles. Free scan, no signup.
What your auditor will ask about
Email authentication enforced
DMARC at p=quarantine or p=reject, SPF -all, DKIM 2048-bit signing.
Art. 21(2)(d) supply chain + Art. 21(2)(e) network security
DNS integrity (DNSSEC)
DS->DNSKEY->RRSIG chain validated end-to-end on every zone you operate.
Art. 21(2)(e) network and information systems security
Transport security (TLS 1.3 + MTA-STS enforce)
MTA-STS policy in enforce mode; TLS 1.3 minimum on public services.
Art. 21(2)(h) cryptography and encryption
Supply chain security (CAA + SBOM-ready)
CAA records pin your CA; certificate transparency monitored.
Art. 21(2)(d) supply chain security
Incident readiness (24h initial notice)
Certificate and domain-expiry alerts delivered by email and webhook on a daily monitoring cadence.
Art. 23 incident reporting (24h early warning)
Who NIS2 applies to
Essential entities include energy, transport, banking, healthcare, drinking water, digital infrastructure, and public administration above 250 employees or €50M turnover.
Important entities include postal services, waste management, chemicals, food, manufacturing, and digital providers above 50 employees or €10M turnover. The fines top out at the higher of €10M or 2% of global turnover for essential entities, €7M or 1.4% for important.
SMB (1-250 employees)
Free tier: one-off NIS2 readiness scan with the article map inline. Starter $29/mo monitors the domain and alerts on any drift before the audit window opens.
MSP / Managed IT
Growth $99/mo: 25 client domains with portfolio-level NIS2 evidence pack. White-label PDF on MSP Partner so the report ships under your name.
Agency / Consultancy
Bulk-scan API + per-client compliance exports. Use the signed evidence envelope as audit-ready attestation alongside your own ROC.
The fastest way to know where you stand
Run a free scan; we hand you a NIS2-mapped evidence pack with every passing control labeled against the article it satisfies and every gap as a copy-paste DNS fix. The deadline is the same whether you start today or June 29.
Run NIS2 readiness scan