Priced by people.

A monthly fee for your environment, plus one number that sizes your price: the people who work with you. Every server, device, domain and log you connect is included, so nothing is ever left out to save money. Choose the tier that matches what NIS2 asks of you, and leave at the end of any month: everything stays on your servers.

Start with NIS2 readiness.

Know where you stand before you commit to anything. What you receive is yours to keep, whether you go on with us or not.

€1,490once, credited in full if you subscribe within 90 days

An assessment against the ten NIS2 measures and what DNSC asks of you
A scan of your addresses and domains from the internet, with your written authorisation
An inventory of your people, devices and services
A risk workshop with your management
Help with your NIS2@RO registration
A roadmap, in order of priority

Secure

For companies outside NIS2, or just starting.

€8per person

+€290per environment

a month

Run for you

Sign-in with passkeys for your people and applications
xsenv-net, the private network, on every device
A password vault for every person
SIEM and monitoring of everything you connect
Updates, backups and failover of the platform
Every service in our catalogue

Compliance

Evidence of everything we run, for your reviews

Response

Business hours, Monday to Friday, Romanian time. Alerts reach us around the clock.

NIS2

For important entities under NIS2.

€15per person

+€590per environment

a month

Everything in Secure, and

Backups of your servers and databases, restore-tested building
Joiners, movers and leavers in one place building
Access reviews every quarter building
Security training for management and staff building

Compliance

Policies drafted from your setup, approved by your management with their passkey building
Risk register and treatment plan building
Audit pack and a quarterly report to management building
Help with every incident report to DNSC, within 24 hours, 72 hours and a month building

Response

Critical incidents around the clock.*

Assured

For essential entities and regulated sectors.

€22per person

+€1,190per environment

a month

Everything in NIS2, and

A disaster-recovery rehearsal every year building
An incident exercise with your team every year building
Our access only with your approval, sessions recorded building
A named engineer

Compliance

Preparation for your DNSC-attested audit, with a partner auditor building

Response

Our fastest response time, written into your contract.*

Marked building: being built during early access, written into your agreement with its date. * During early access, alerts reach a person around the clock; a guaranteed response time starts once our on-call rota of three people is in place.

Everything you connect is included.

Every server, workstation and phone, every domain and its certificates, every cloud or SaaS account, every log line, and every service in our catalogue. Adding them raises your hosting bill, which you pay to your provider, not ours. Our price moves only where our work does:

Fleets	Product or IoT devices beyond five per person, such as chargers or vehicle units	€190 a month up to 1,000 devices, €490 up to 10,000, by agreement beyond
New integrations	A technology nobody has brought us yet	€490 to €1,990 once; half if we may reuse the work for everyone, after which it is free for all
Larger teams	The price of each person above 250, and above 1,000	−20%, then −35%
A year ahead	Paying twelve months at once	−15%
Founding customers	Our first ten customers, for being a reference and giving us feedback every month	−40% for 24 months, price locked
Audit guarantee	An auditor finds a gap in a control we run	We fix it at our cost, and that month is free

Prices in euros, excluding VAT, billed monthly; cancel at the end of any month. Your servers are yours: you pay your cloud provider directly, typically €40 to €80 a month for an environment on Hetzner, or you use your own hardware.

Your estimate

€890 a month + your servers

NIS2: €590 per environment, 20 people €300.

As one of our first ten customers: €534 a month for 24 months. NIS2 readiness, €1,490 once, is credited if you subscribe within 90 days.

Compared with the other ways to get there.

	Build it yourselves	Buy each part as a service	xsenv
Who runs it	Your team, day and night	Each vendor its own part; you join them up	Us, the whole stack, as one
Where your data lives	On your servers	In each vendor's cloud	On your servers
Reachable from the internet	Whatever your team opens	Every vendor's sign-in page and API	Nothing but WireGuard, silent to strangers
What it costs	The salaries of people who can run it around the clock	A subscription per tool, most of them per person	One price, sized by your people, with everything you connect included
If you leave	Nothing to leave	What each vendor lets you export	Everything stays where it runs, with what you need to run it without us

Questions we are asked.

Who can see our data?

Your data lives on your servers and stays there. Our own systems hold only metadata: whether your services are healthy, how many alerts are open. When our engineers work in your environment they come in like your own staff, through your private network, with the rights you give them, and every access is recorded in your SIEM. As your operator we also hold your environment's credentials today; we are reducing them to what cannot open your data.

What happens if xsenv disappears?

Your servers keep running. You hold a recovery key we never see, and with it alone you can open a handover package of your environment: its code, its credentials, the way to its backups. We rehearse that handover with your key and nothing else before it is ever needed.

And if we cancel?

You can leave at the end of any month. The servers and everything on them are already yours; we hand over the environment's code and credentials, and remove our access.

Where do the servers run?

In a cloud account in the EU, which can be transferred to you, or on your own hardware. On Hetzner an environment typically costs €40 to €80 a month, paid by you directly.

Who else handles anything about us?

Legally we are your processor under the GDPR. The services we use: the cloud provider your servers run on, if you choose one; PagerDuty and ntfy, which deliver alerts to the person on call and never carry the content of your data; Cloudflare, for this website and our e-mail only.

Do our applications have to change?

Applications that support SAML or OpenID Connect sign in through your new identity provider, with passkeys. Others stay as they are, reachable only through your private network. Connecting them is part of the setup.

Which tier do we need?

Outside NIS2: Secure. An important entity: NIS2. An essential entity, audited by a DNSC-attested auditor: Assured. If you are not sure which you are, NIS2 readiness tells you.

Why per person, and not per device or per log?

Because a price per device or per gigabyte makes leaving things out the cheapest choice, and what is left out is not protected. Our work does not grow with your devices either: your servers carry them.

What does early access mean?

We take a few customers at a time and set each one up ourselves. The first ten pay 40% less for 24 months. What is still being built is marked on this page and written into the agreement with its date, not discovered later.

Early access, by invitation.

We are taking our first customers now. The first ten pay 40% less for 24 months, for helping us shape the service.

Book a demo hello@xsenv.com