Marktonderzoek · 17 mei 2026
We hebben 136 commerciële GRC/ISMS-platforms onderzocht. 103 vertellen je niet wat ze kosten.
We hebben elke prijspagina woordelijk vastgelegd. Waar prijzen achter een demo-formulier verborgen zijn, schrijven we 'Demo-call vereist'. Geen schattingen, geen derde bronnen. Negen open-source alternatieven (verinice, CISO Assistant, Deming, ISMS Builder, Unicis CE, wijzelf en anderen) staan niet in deze lijst omdat ze je geen abonnement verkopen.
136
Leveranciers onderzocht
20
Openbare prijzen
12
Alleen startprijs
103
Demo-call vereist
79
NIS2 als framework
29
Landen
Per: 2026-05-17
Waarom deze markt klaar is voor disruptie
76% van deze 136 commerciële GRC/ISMS-leveranciers verbergt hun prijzen. De producten zijn formulieren, sjablonen en checklists bovenop een database. De marginale kosten per extra klant zijn bijna nul. De prijs niet. Hier zijn de bewijzen.
Vijfcijferige jaarcontracten voor een formulier
Vanta, Drata, Secureframe, OneTrust, MetricStream, IBM OpenPages, ServiceNow GRC, Archer, Diligent — alle enterprise GRC-suites verbergen prijzen en vragen €30.000+/jaar voor een workflow-tool met templates.
Oost-EU-leveranciers zijn 10x goedkoper en transparant
Copla (LT) verkoopt NIS2 voor €3.500/jaar als eigen SKU. NIS2 Manager (CZ) voor ~€980/maand. Conformio (HR) voor €145/maand. Zelfde productcategorie, andere prijsbeslissing.
OSS-concurrentie groeit uit Duitsland en Frankrijk
ISMS Builder (DE, AGPL), CISO Assistant (FR, AGPLv3, 130+ frameworks), Little-ISMS-Helper (DACH), Deming (FR) — allemaal gratis self-hosted, allemaal NIS2 expliciet.
Marktconsolidatie versnelt
AuditBoard → Optro. CONTECHNET → i-doit. DocSetMinder → Allgeier. 3rdRisk → Diligent. RISMA + Wired Relations + ComplyCloud → Cerivo. StandardFusion → Wolters Kluwer. Galvanize → Diligent. Tugboat → OneTrust. Archer → Cinven.
| Leverancier | Land | Prijs | Data-export | NIS2 | Gratis | Bron | Instap |
|---|---|---|---|---|---|---|---|
| 3rdRisk (Diligent) | NL | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; acquired by Diligent Jan 2026 |
| 6clicks | AU | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; Hub-and-Spoke MSP GRC, 1,000+ frameworks |
| AdaptiveGRC (C&F) | PL | Demo-call | — | Ja | — | Prijspagina openen | Demo call required |
| Akitra | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; agentic-AI compliance |
| Anecdotes | IL | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'One Platform, Simple Pricing' but no € |
| Anitian | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; FedRAMP focus |
| Apptega | US | Demo-call | — | Nee | Trial | Prijspagina openen | Demo call required; 14-day trial on Essentials |
| Aptien | CZ | Demo-call | — | Nee | Free | Prijspagina openen | Vendor displays '$-' placeholder; per-user model but no number |
| Archer (Cinven PE) | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; category-defining form/workflow IRM |
| Atena Governance | IT | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; 30-day trial, no CC |
| Athereon GRC | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 4 size classes S/M/L/XL |
| AuditBoard (now Optro) | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; rebranded March 2026 AuditBoard → Optro |
| Auditool (June Factory) | FR | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call for full version; 7-day sandbox free with 50+ NIS2 actions |
| BitSight | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; cyber ratings + TPRM + ASM |
| Black Kite | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; cyber ratings/TPRM |
| Centraleyes | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 180+ frameworks |
| Cerrix | NL | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; enterprise GRC |
| Cibgest | PT | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; 14-day trial, no CC |
| Complidoo (Asystel-BDF) | IT | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; low-code GRC |
| Complyance | US | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; $20M Series A Feb 2026 (GV, EU VCs Creandum/HV/Speedinvest) |
| ComplyCloud (Cerivo) | DK | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; part of Cerivo merger 2025/2026 |
| ComplyDo | DE | Demo-call | Niets gedocumenteerd | Ja | — | Prijspagina openen | Demo call required; YC F25, Berlin |
| Compyl | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 20+ frameworks |
| CONTECHNET (i-doit) | DE | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; CONTECHNET 301-redirects to i-doit |
| CyberArrow | AE | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; /pricing returns 403 |
| CyberSaint CyberStrong | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; annual or multi-year only |
| Cypago | IL | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; AWS Marketplace from $60k/yr |
| DataGuard | DE | Demo-call | Niets gedocumenteerd | Ja | — | Prijspagina openen | Demo call required; Base/Pro/Enterprise — all 'Get a quote' |
| Datalog (Zucchetti) | IT | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; Zucchetti group |
| Delve (collapsed) | US | Demo-call | — | Nee | — | Prijspagina openen | April 2026: YC dropped them for fake SOC 2 audits + code theft |
| Diligent (incl. Galvanize, 3rdRisk) | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; ~23,000 clients post-mergers |
| DocSetMinder | DE | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; acquired by Allgeier CyRis |
| Drata | US | Demo-call | Gedeeltelijk | Nee | — | Prijspagina openen | Demo call required; NIS2 not listed on pricing page |
| Enactia | CY | Demo-call | — | Nee | Trial | Prijspagina openen | Demo call required; 14-day free trial |
| Formalize | DK | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; 14-day limited trial |
| fuentis | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'Free start' CTAs route to contact form |
| G DATA Business | DE | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call for business products; consumer line public |
| GBTEC (BIC GRC) | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; product page 404 |
| GlobalSuite Solutions | ES | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| GovernX | RO | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required (prices behind login); 'Made in Romania, for Europe' |
| GRCTools (ESG Innova) | ES | Demo-call | — | Ja | — | Prijspagina openen | Demo call required |
| Heimdal | DK | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; /pricing 404 |
| HiScout | DE | Demo-call | Alleen rapporten | Ja | — | Prijspagina openen | Demo call required; no public pricing page |
| Holm Security | SE | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; 1-3 year minimum contract |
| Hybridity (Hy5) | SE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; €2M raise Feb 2026 |
| HyperComply | CA | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; TPRM/questionnaire automation |
| Hyperproof | US | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'AI-powered GRC' marketing |
| IBM OpenPages | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; enterprise GRC + AI |
| INFODAS (SAVe) | DE | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; explicitly bundled with consulting |
| ISMS.online | UK | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'Bespoke, customized pricing'; NIS2 as 'optional extra' |
| Kertos | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required |
| Kiteworks | US | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'CALL FOR PRICING' Enterprise |
| Kymatio | ES | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| Legiscope | FR | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; /pricing 404 |
| LexCyberAI | PL | Demo-call | — | Ja | Free | Prijspagina openen | Demo call required; free NIS 2 bootcamp |
| LogicGate Risk Cloud | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; no-code workflow builder for GRC |
| LogicManager | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 'Job-to-be-Done pricing' |
| Make IT Safe | FR | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; via ReCyF referential |
| MetricStream | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; IRM mega-suite, AppStudio = form builder |
| NIS2 Control (Virtual IT) | SI | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; ZInfV-1 Slovenia |
| Norm Ai | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; $87M total funding (Coatue, Bain, Blackstone) |
| NorthGRC | NO | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| OMNITRACKER | DE | Demo-call | Alleen rapporten | Ja | — | Prijspagina openen | Demo call required; 'KOSTENFREI TESTEN' is demo request |
| Oneleet | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; $33M Series A, GRC + pentest |
| OneTrust | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 6 separate solution suites, all modular |
| Onspring | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; Bronze/Silver/Gold/Platinum without prices |
| otris | DE | Demo-call | — | Nee | Trial | Prijspagina openen | Demo call required; phone-first sales |
| Perium | NL | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; 30-min setup claim |
| ProcessUnity | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; pure questionnaire platform |
| QSEC (Nexis) | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; claims 'transparent', shows no € |
| Resolver (Kroll) | CA | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 3-factor quote (modules + customization + active users) |
| RIG NIS (Wolters Kluwer PL) | PL | Demo-call | — | Ja | — | Prijspagina openen | Demo call required |
| Riskonnect | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; IRM on Salesforce |
| RISMA Systems (Cerivo) | DK | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; only /price-request, no /pricing |
| Robin Data | DE | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; /preise page returns 404 |
| SAI360 | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; Compliance + Risk bundles, all 'Request Quote' |
| Schleupen GRC | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; concurrent user / enterprise license |
| Scytale | IL | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 5 tier names without prices |
| Secfix | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| SECJUR | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| Secrato | BE | Demo-call | — | Ja | — | Prijspagina openen | Plan names public, prices not; launched March 2026 |
| secunet | DE | Demo-call | — | Ja | — | Prijspagina openen | Project-based custom quote; government/defense vendor |
| Secureframe | US | Demo-call | Gedeeltelijk | Nee | — | Prijspagina openen | Demo call required; 'Get a quote' on every tier |
| SecurityScorecard | US | Demo-call | — | Nee | Free | Prijspagina openen | Free Forever tier (limited); Core/Premium/Elite/TITAN MAX all demo-gated |
| ServiceNow GRC | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; GRC on Now Platform = forms + workflows |
| ShieldIQ | IE | Demo-call | — | Ja | Free | Prijspagina openen | Freemium, 'no card no setup calls'; tier prices demo-gated |
| SoSafe | DE | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; tier names only, no prices |
| Sprinto | IN | Demo-call | Gedeeltelijk | Nee | — | Prijspagina openen | Demo call required; pricing page is JS SPA, no prices visible |
| StandardFusion (Wolters Kluwer TeamMate) | NL | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 308-redirects to Wolters Kluwer TeamMate |
| Steryon | ES | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; €1M seed, OT/industrial, NIS2 explicit |
| SureCloud | UK | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'Talk to us about pricing' |
| SwissGRC | CH | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; no /pricing page |
| Syteca (ex-Ekran) | US | Demo-call | — | Ja | Trial | Prijspagina openen | Demo call required; SaaS / On-prem / AWS / Azure SKUs all gated |
| Tenacy | FR | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'sovereign' France-hosted |
| Teseo NIS2 GRC | IT | Demo-call | — | Ja | — | Prijspagina openen | Demo call required; 'demo di 20 minuti' |
| Thoropass (was Laika) | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; audit + platform bundle |
| TrustCloud | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; 'Every GRC journey is different' |
| Trustero | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; AI GRC |
| Vanta | US | Demo-call | Alleen rapporten | Nee | Trial | Prijspagina openen | Demo call required (4 tiers: Essentials, Plus, Professional, Enterprise — no prices shown) |
| Whistic | US | Demo-call | — | Nee | Free | Prijspagina openen | Demo call required; free profile, paid all gated |
| Wiz | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; cloud-security CNAPP, not pure GRC |
| Workiva | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; ESG/CSRD focus |
| ZenGRC/RiskOptics | US | Demo-call | — | Nee | — | Prijspagina openen | Demo call required; ECONNREFUSED on direct fetch |
| Compliance Aspekte | DE | Niet te verifiëren | Alleen rapporten | Nee | — | Prijspagina openen | Website was unreachable (HTTP 522) at audit time |
| heyData | DE | Gedeeltelijk | — | Ja | — | Prijspagina openen | Starter from €59/mo, Pro from €99/mo, Enterprise from €169/mo; 2-year minimum contract |
| Proliance | DE | Gedeeltelijk | — | Ja | — | Prijspagina openen | Data Protection from €125-€233/mo; ISMS Light from €500/mo; ISMS Core from €1,000/mo; NIS2 Executive Training €600 |
| kronsoft (opus i) | DE | Gedeeltelijk | — | Nee | Free | Prijspagina openen | From €259/year (entry: 2 modules + support + updates); full price list as downloadable PDF |
| ConnectSecure | US | Gedeeltelijk | — | Ja | Trial | Prijspagina openen | From $300/mo (MSP only, usage-based); tier prices gated |
| Docusnap | DE | Gedeeltelijk | — | Ja | Trial | Prijspagina openen | From €465/year (on-prem or SaaS); scales by inventory size |
| BOC Group ADOGRC | AT | Gedeeltelijk | — | Ja | — | Prijspagina openen | Focus Editions from €520/mo (5 seats); Core from €1,195/mo (3 scenarios); Extended from €2,100/mo (7 scenarios); detailed quotes password-protected |
| Wired Relations | DK | Gedeeltelijk | — | Ja | Free | Prijspagina openen | Free (150 elements); Pro €670/mo (annual billing only); Enterprise quote |
| VComply | US | Gedeeltelijk | — | Nee | — | Prijspagina openen | Pro GRC Suite from $1,000/mo per module; annual only, 12-mo minimum; 20% nonprofit discount |
| UpGuard | US | Gedeeltelijk | — | Nee | — | Prijspagina openen | Standard $1,750/mo (annual, 50 vendors); higher tiers gated; extra vendors $79/mo |
| Cybervize | DE | Gedeeltelijk | — | Ja | Trial | Prijspagina openen | vCISO Basic €3,600/mo (≤20h); Standard €4,900/mo (≤40h); Interim CISO €8,000-€15,000/mo; platform license modular, undisclosed |
| Strike Graph | US | Gedeeltelijk | — | Ja | Free | Prijspagina openen | Launch free; Certify from $10,000/yr; Scale from $21,500/yr; Enterprise from $35,000/yr; framework add-ons $2K-$8K |
| Mitratech Alyne | DE | Gedeeltelijk | — | Nee | — | Prijspagina openen | Enterprise plan from €25,000/year (publicly stated); 1,500+ control library |
| Orbiq | DE | Transparant | — | Ja | Free | Prijspagina openen | Free €0; Team €85/mo (€850/yr); Business €190/mo (€1,900/yr); Enterprise custom; 17% annual discount |
| NIS2Compass | DE | Transparant | — | Ja | — | Prijspagina openen | From €29/month (NIS2-only, 'no consultants') |
| ISOPlanner | NL | Transparant | — | Ja | Trial | Prijspagina openen | NIS2 €39/mo standalone; ISO €59-€118 per management user/mo (yearly) |
| EDIRA (ETES) | DE | Transparant | — | Ja | — | Prijspagina openen | €49/month + €150 setup (NIS-2 add-on on existing framework) |
| Conformio (Advisera) | HR | Transparant | — | Nee | Trial | Prijspagina openen | Starter €145/mo, Pro €245/mo, Advanced €299/mo (annual) |
| GRASP German GRC | DE | Transparant | Alleen rapporten | Ja | Trial | Prijspagina openen | €159–€179/month NIS2 module (3-yr lock 159; 1-yr 179); 1 user incl. |
| Outlex | PT | Transparant | — | Nee | — | Prijspagina openen | Core from €249/mo, Growth from €549/mo + per-credit lawyer consultations |
| Compleye | NL | Transparant | — | Ja | — | Prijspagina openen | Platform €275/mo; NIS2 Verification (2-day) €1,600; Training (4-day) per request |
| activeMind.cloud | DE | Transparant | — | Ja | — | Prijspagina openen | €290/month per module + €49 per additional norm; Whistleblowing €99-€390/mo; extra users €20/mo |
| Defendsphere | EU | Transparant | — | Ja | — | Prijspagina openen | Basic €299/mo (5 infra licenses); Standard €499/mo; Premium custom |
| Venvera | NL | Transparant | — | Ja | Trial | Prijspagina openen | Basic €399/mo (4 frameworks: DORA, NIS2, GDPR, Cyber Essentials); Pro €899/mo (6 incl. ISO 27001, EU AI Act); 11% annual discount |
| Matproof | NL | Transparant | — | Ja | Trial | Prijspagina openen | Starter €480/mo (1 framework, 10 members); Professional €1,200/mo (3 frameworks); 20% annual discount |
| Privado.ai | US | Transparant | — | Nee | — | Prijspagina openen | Web Auditor from $600/website/mo; App Auditor from $800/app/mo; Wren AI Privacy Agent from $4,200/mo (annual) |
| NIS2 Portugal (Isofficer) | PT | Transparant | — | Ja | Free | Prijspagina openen | Service catalog: gap analysis from €1,500; training €990/participant; doc kit from €2,500/yr; external CISO from €750/mo |
| Ratisbona Compliance | DE | Transparant | Niets gedocumenteerd | Ja | — | Prijspagina openen | RC_NIS2 €799/month (workshops + ISMS); GF-Schulung €999 one-off |
| NIS2 Manager / CYBER Manager | CZ | Transparant | — | Ja | Trial | Prijspagina openen | 24,900 CZK/month (~€980) excl. VAT, single tier, 12-mo commitment, 30+ modules |
| Cyberday | FI | Transparant | — | Ja | Trial | Prijspagina openen | Employee band: <20 €2,500/yr; 20-49 €3,200; 50-99 €4,500; 100-199 €6,800; 200-499 €9,900; up to 2,999 €19,900 |
| Eramba | CH | Transparant | — | Nee | Free | Prijspagina openen | Community free (non-OSI license); self-host Enterprise €2,500/yr; SaaS Enterprise €5,000/yr |
| Copla (ex-CyberUpgrade) | LT | Transparant | — | Ja | — | Prijspagina openen | NIS2 €3,500/year + €499 onboarding (own SKU); ISO 27001 €2,999/yr; DORA €4,500/yr; 20% off each additional framework |
| NIS2Vision | EU | Transparant | Niets gedocumenteerd | Ja | — | Prijspagina openen | Basic €4,999 yr 1 (setup €2,599 + €200/mo, 5 users); Important €8,800 yr 1; Essential €17,600 yr 1 |
Methodologie
Gecontroleerd op 2026-05-17
- •We hebben elke prijspagina handmatig bezocht.
- •Prijzen zijn woordelijk overgenomen van de website van de leverancier.
- •Geen extrapolatie uit G2, Capterra, blogs van derden of LinkedIn.
- •Waar prijzen achter een demo-formulier liggen: 'Demo-call vereist'.
- •Waar prijzen alleen als 'vanaf €X' worden vermeld: 'Gedeeltelijk transparant'.
- •Driemaandelijkse heraudit. Leveranciers kunnen correcties indienen.
Correctie indienen
Zijn onze gegevens over jouw product onjuist? Mail simon@nisd2.eu met de URL van je prijspagina. We werken binnen 48 uur bij en houden een wijzigingslog bij.
Gratis + Open Source + geen lock-in
We verkopen geen NIS2-compliance. We maken het toegankelijk. Gratis, open source, geen verkoopteam dat je belt.
Platform starten