B-Scan — external technical assessment
Who it's for: essential entity, important entity
An independent external technical check: DNS, SPF/DKIM/DMARC, TLS configuration, open ports and security headers — results are mapped against the NIS2 Article 21(2) measures and packaged as verifiable evidence you can show to a client or a supervisor. This is not a penetration test or an audit — it is an external check of your publicly visible infrastructure.
The package includes:
- DNS setup — we check whether your domain's nameservers and records are correctly configured and protected against spoofing.
- Email spoofing protection (SPF, DKIM, DMARC) — we check whether an outside party could send emails pretending to be your company.
- Encrypted connection (TLS) — we check whether your website's certificate is valid and the encryption strong enough.
- Open ports — we check which services are reachable from the internet. Open admin interfaces are a common attack path.
- Web server security headers — we check whether the server gives visitors' browsers protective instructions that block common attacks.
- Findings mapped against the Article 21(2) measures — you see which NIS2 requirement each finding relates to, not just a technical result.
- Verifiable evidence report — a document you can show to a client, partner or supervisor as proof of the check performed.
- Ranked remediation recommendations — you know which finding to start with when time or resources are limited.
590 EUR
The B-Scan report is usually ready within 5 minutes of payment — we'll notify you when it's done.
Larger volume, multiple countries or a group? Request a personal quote.
VAT
All prices are net (excluding VAT). Invoices are issued by AIPOS OÜ (Estonia).
- For Estonian clients, Estonian VAT of 24% is added.
- Business clients in another EU country with a valid VAT number (VIES-verified): reverse charge — 0% on the invoice, you account for VAT in your own country (Art. 196 of the VAT Directive). Without a valid VAT number, Estonian VAT of 24% is added.
- For clients outside the EU, no Estonian VAT is added (export of services, 0%).
Recommended next steps
Your client falls under NIS2 and requires security measures from suppliers (Article 21(2)(d))? This attestation is for companies that are not NIS2 entities themselves: a technical check plus structured evidence that answers your client's supply chain requirements with a single document.
- Baseline technical check of your public infrastructure — the same checks as in the B-scan (DNS, email, TLS, ports, security headers), adapted to the supply-chain context.
- Supply chain requirements compliance map (Article 21(2)(d)) — shows which of your client's supplier security requirements your technical posture satisfies.
- A security attestation you can hand to your client — a single document your client can use for their own compliance check.
- Discounted renewal with monitoring — if your infrastructure changes, you can renew the attestation more cheaply by joining monitoring.
- Fill-in wizard in the portal — step by step, with a manual explanation for every field
3 900 EUR