Am I covered by NIS2?
Three questions: what you do, how big you are, and where. You get your likely status under the NIS2 directive (essential, important or not covered), the article that decides it, and what to do next in your country.
Runs entirely in your browser: your answers are never sent to us or anyone else.
Covered, or asked by a covered customer?
Perimetry Cloud watches what attackers see of your domains every week, maps each finding to NIS2, and gives you an attestation your customers and assessors can check online.
Questions
What is the difference between essential and important entities?
Both have the same duties: security measures, incident reporting and management accountability. Essential entities are supervised proactively (audits and inspections at any time) and face higher fines; important entities are supervised after the fact, when there is evidence of a breach.
We are a small company. Can NIS2 still apply?
Yes, in a few cases: DNS providers, top-level domain registries, trust service providers and telecom providers are covered whatever their size, and a state can designate a small entity that is the sole provider of an essential service. More often, small suppliers meet NIS2 through the contracts of covered customers.
How is the size counted?
With the EU definition of SMEs: staff and either turnover or balance sheet total, for the whole group, adding the shares of partner companies and all of linked companies. A company with 50 staff or more, or more than 10 million € of both turnover and balance sheet, is at least medium-sized.
Are my answers stored?
No. The check runs in your browser and the page sends nothing.