EUSEC
Dashboard
Pricing Services Insurance
Problem Solution How it works Use Cases for Buyer
Use Cases for Supplier EUSEC Medals
Online-Check: Affected by NIS2? Calculator: NIS2 fines & liability Calculator: Cyber Damages Rating Criteria Independence & Legal Information Rating Inquiry or Other Podcast
Rating Inquiry or Other About Us Trust Center Report a Vulnerability Imprint
Pricing

Transparent pricing.

EUSEC prices linearly per supplier — so classifying a supplier as A or C carries zero financial incentive.

For Subscribers · per supplier, annually

For Buyers

As Buyer (Purchaser), CISO or Manager: Get ratings for your entire portfolio. Invite your supplier to do the inside self-assessment (if not already rated).

€149 / supplier
✓ Regular outside rating across all 10 dimensions
✓ Event-driven alerts on critical signals (breach, CVE, blacklist)
✓ § 30 compliance dashboard + documentation export
✓ Discrepancy detection (outside vs. inside)
✓ Cascade invitations — unlock fourth-party visibility
✓ A-supplier: intensified weekly scan + real-time alert layer

for 1 year  ·  min. 10 suppliers
Optional Add-on

Data Feed (API)

+20%
✓ Get automated ratings via our API.
✓ Integration into your GRC
✓ Integration into your procurement or TPRM platform
✓ REST API
Optional Add-on

Managed Service

+40%
✓ Delegate your supply chain security to our experts
✓ Monthly reporting
✓ We invite your supplier to do the inside rating. Includign follow-up and reminders
✓ You just give us any supplier list - we do the rest
✓ Supplier Classification by us
For suppliers

For Suppliers

Fill once. Share with every customer. Improve your position.

€490 / year
✓ Get detailed rating reports — all 10 dimensions visible
✓ Inside Rating: do the self-assessment (7–15 questions)
✓ Get an EUSEC® certificate of your rating result
✓ Improvement — know before your buyer flags it
✓ § 30 evidence pack — ready for your own auditors
✓ Secure your supply chain: invite your own suppliers

for 1 year
Optional Service

Analyst Session

€990
✓ Check your Rating with a Senior Analyst (1h)
✓ Better understand our methodology, guidelines and scoring
✓ Understand what impacts your score most and how to provide the right supporting evidence
✓ Questions such as "What does EUSEC expect for a AAA, AA or A rating?" can be addressed
Exhibit 02 — Volume pricing

Linear pricing. No tier cliffs.

You pay per supplier. Volume discounts apply automatically. No locked plan levels that force you to overpay.

Monitor — buyer subscription
Suppliers
Annual per supplier
Monthly equiv.
10 – 50
Minimum: 10 suppliers = €1.490/yr
€149
€12.41
51 – 250
e.g. 80 suppliers = €10.320/yr
€129
€10.75
251 – 500
e.g. 300 suppliers = €32.700/yr
€109
€9.08
501+
Custom agreement, SLA, dedicated support
Custom
—
Annual cost for 50 suppliers — market comparison
Provider
BitSight
enterprise
≈ no public prices
SecurityScorecard
enterprise
≈ no public prices
UpGuard
list price
≈ €18.223,80
EUSEC
NIS2-native · EU-hosted
€8.940 (−51% vs UpGuard)
(incl. 20% for API)
Exhibit 03 — FAQ

Common questions.

Why is ABC classification not part of the price?
Per-tier pricing creates a direct financial incentive to mis-classify suppliers downward — exactly the behaviour you should never encourage in a risk management tool. EUSEC charges per supplier regardless of ABC tier. Your classification drives monitoring intensity and determines whether you add Verify for a specific supplier — but it never changes your invoice automatically. The only thing motivating accurate classification is your own § 30 risk posture.
A supplier has 10 domains — how is that priced?
EUSEC rates an organisation, not a domain count. Subdomains (mail.company.de, vpn.company.de) are discovered automatically via Certificate Transparency logs and DNS enumeration — one organisational scan covers all of them. For companies with multiple top-level domains (company.de, company.com), the primary domain registered in the Steckbrief anchors the scan, and related TLDs are discovered via CT attribution. Up to 3 registered TLDs are included in the standard price; additional separate TLDs available on request.
Do I need an NDA before a supplier fills in the inside assessment?
No. The EUSEC Platform Terms of Service create a three-party confidentiality framework: EUSEC commits to keeping supplier data confidential from any party the supplier has not authorised; buyers commit contractually to using inside data solely for their own § 30 compliance. No bilateral NDA required. A standard EUSEC NDA PDF is published for legal review if your supplier's counsel requires it.
What about CIR-covered suppliers (DNS, Cloud, MSP)?
Monitor and the standard inside assessment cover all 10 Art. 21 NIS2 measures — the screening layer. For suppliers subject to the EU Implementing Regulation 2024/2690 (DNS, TLD, Cloud, RZ, CDN, MSP, MSSP, trust service providers, online marketplaces), a platform flag indicates that the full ~159 CIR Annex controls require a separate audit. Verify (Tier 3) prepares the evidence scope for that audit — EUSEC does not claim to replace it.
Is the outside rating together with the inside rating defensible as § 30 evidence?
Yes. § 30 BSIG requires risk-based, proportionate supply chain measures — not a full audit of every supplier. An automated outside rating is a documented, repeatable, proportionate measure for C-tier suppliers, exactly as Creditreform's scoring is for commercial credit risk. EUSEC publishes its methodology, commits to the US Chamber of Commerce Principles for Fair and Accurate Security Ratings and provides exportable § 30 documentation packages for regulatory defensibility.
No credit card. No account.

Rate 10 suppliers for free.
Results to your inbox in hours.

See the outside rating engine at work before you commit to a single euro.