Early AccessRequest access
From gap analysis to policies, risks and incidents in one platform — no CISO required. Built for SMBs in scope of NIS 2, with DORA and GDPR modules planned.
Designed for teams across all 18 NIS 2 sectors
Why It Matters
An estimated 160,000+ organisations across 18 sectors are in scope. Medium-sized companies face the same core obligations as large enterprises — with fewer resources.
Article 20 requires management bodies to approve and oversee cybersecurity measures — with personal accountability for compliance.
Maximum fines of at least €10M or 2% of worldwide turnover (whichever is higher) for essential entities, and €7M or 1.4% for important entities, under national law.
Significant incidents require an early warning to the CSIRT or competent authority within 24 hours, a notification within 72 hours and a final report within one month.
Article 21 defines 10 minimum security measures covering risk analysis, incident handling, supply chain, encryption, and more.
NIS 2 is not abstract — these are the obligations your organisation must meet. ShieldBase's core workflows map to the regulation itself.
“Member States shall ensure that the management bodies of essential and important entities approve the cybersecurity risk-management measures taken by those entities in order to comply with Article 21, oversee its implementation and can be held liable for infringements by those entities of that Article.”
Directive (EU) 2022/2555, Article 20(1)
“Member States shall ensure that essential and important entities take appropriate and proportionate technical, operational and organisational measures to manage the risks posed to the security of network and information systems which those entities use for their operations or for the provision of their services […]”
Directive (EU) 2022/2555, Article 21(1)
“Each Member State shall ensure that essential and important entities notify, without undue delay, its CSIRT or, where applicable, its competent authority […] of any incident that has a significant impact on the provision of their services […]”
Directive (EU) 2022/2555, Article 23(1)
ShieldBase is built specifically to address these obligations.
Gap analysis, policies, risk register, incident handling and supplier assessments are each built around specific NIS 2 articles — not a generic compliance checklist.
How It Works
Designed for SMB teams without dedicated security staff — on their own or together with their advisor.
Answer guided questions covering the 10 NIS 2 Article 21 measures about your company, sector, and current security posture.
AI suggests answers you can accept or reject, and summarises your gaps against all 10 Article 21 measures with prioritised next steps.
Generate policy drafts for each NIS 2 control, get risk-treatment suggestions and training recommendations — then review and adapt them.
Monitor your compliance score, manage incidents, train employees, and track supply chain risk.
Platform
All 10 NIS 2 Article 21 measures covered on every tier. No modules to buy separately.
Languages
National authorities expect incident reports and compliance documentation in the official language. ShieldBase's interface and AI drafts are available in the languages below.
English
International
Croatian
Croatia
German
Germany & Austria
Slovenian
Slovenia
Hungarian
Hungary
Czech
Czech Republic
Polish
Poland
Romanian
Romania
Why local language matters for NIS 2
Organisations report to their national CSIRT or competent authority, usually in the official national language. ShieldBase writes AI drafts directly in the language you work in — review the terminology before you submit anything.
Pricing
No hidden fees. Higher tiers unlock advanced tools — not basic protection.
For small teams beginning their compliance journey.
€996/year (save €192)
Get StartedCancel anytime
Comprehensive compliance for growing companies.
€1990/year (save €398)
Get StartedCancel anytime
Everything in Starter, plus:
For larger teams and groups of companies.
€3490/year (save €698)
Contact SalesCancel anytime
Everything in Professional, plus:
Deep analysis of NIS 2 enforcement, the EU Simplification Package, ENISA reports, the ICT Supply Chain Toolbox, and the CRA × NIS 2 overlap — written by the team building the platform.
From gap analysis to policies, risks and incidents — ShieldBase gives SMBs AI-powered tools for NIS 2.