NIS2 / CyberFundamentals assessment
SMEs under NIS2, or suppliers of NIS2 entities
- Target CyFun level
- Gaps against it
- 90-day action plan
- Based on the CCB's official self-assessment
Cybersecurity and NIS2 readiness, AI agent-readiness and local SEO, as audits and short engagements for SMEs. Each one lists its deliverables, its price and its lead time.
All prices are in EUR and exclude VAT (21 % in Belgium).
Any SME that doesn't know where it stands
Bought one by one, they come to €3,270. This is a readiness and gap analysis. It is not a certification, an attestation or an official CyberFundamentals verification.
Defensive security for small and mid-sized companies. Review a website or an application, harden the server or cloud environment it runs on, and see where the company stands against NIS2 and CyberFundamentals (CyFun), the Centre for Cybersecurity Belgium's framework, with a gap analysis and a 90-day plan. Security follows OWASP guidance and every finding comes with a proposed fix.
SMEs under NIS2, or suppliers of NIS2 entities
Sites with customer accounts, payments, back-office
SMEs with a server, VPS or cloud
This is a readiness and gap analysis. It is not a certification, an attestation or an official CyberFundamentals verification.
Penetration tests and formal audits are outside these fixed-price offers. When a project needs one, a specialist is brought in to run it.
See the method on a real case: an anonymised, read-only security and integrity review of a Belgian e-commerce back office. Read the case study
AI assistants answer from what they can read about a business. The audit tests how ChatGPT, Claude and Perplexity actually answer about yours, scores it, and lists what is missing. The implementation adds the missing pieces: llms.txt, structured data, a Wikidata entry and sameAs links, with an automated check so you can see when something breaks.
Businesses that want to be found and recommended by ChatGPT, Claude, Perplexity
After the AI audit
For local businesses in Brussels and across Belgium. The audit reads Search Console and the Google Business Profile and checks that name, address and phone number are the same on 10 Belgian directories, then lists 10 actions. The programme carries them out month by month, and each action is measured over an observation window.
Local businesses, Brussels/Belgium
Two monthly subscriptions, for after a review, a hardening or an audit.
After a review or hardening
After the SEO audit
This is a readiness and gap analysis. It is not a certification, an attestation or an official CyberFundamentals verification.
Each offer covers the deliverables listed on its card, at the price and lead time shown. Anything beyond them is a separate conversation.
No. The audits show what is missing and what to fix, and the programme measures each action over an observation window. How search engines and AI assistants answer depends on factors nobody controls.
That is quoted per project. See the services page, or tell us what you are building through the contact form.
The 360° SME Check is the way in. Book 30 minutes to talk it through, or write to us with the details.