Compliance with NIS2 fully under the control of your infrastructure
Praetorix is a GRC tool (Governance, Risk & Compliance) covering the mandatory core of security measures required by Article 21 of NIS2 and its national transposition — from asset registration through risk analysis to outputs for your national regulator. It runs exclusively on-premise, with a perpetual license and without sending any data to external services.
Mandatory GRC core included
Asset registration, multi-entity model, risk register and analysis, SoA, audit trail — covering the security measures required by Article 21 of NIS2.
Data leaving the infrastructure
Privacy-by-design for critical infrastructure. Document content is not processed through any external services or language models (LLM).
One-off license
Perpetual license for the entire group with no recurring fees. Only the optional annual maintenance and support is variable.
A full-featured compliance tool — with no compromise on data security
The combination of full functional coverage, on-premise operation and an unlimited-term license represents a significantly more favourable option in terms of TCO than subscription (SaaS) models.
Full coverage of the mandatory core
From asset registration and management, through the multi-entity group model and risk register, to the Statement of Applicability (SoA) and a complete audit trail — modules G1–G9 cover the security measures required by Article 21 of NIS2.
On-premise deployment
The solution runs exclusively within the client's computing environment. No data leaves the group's infrastructure — suitable for critical infrastructure operators.
Perpetual license, no lock-in
A one-off license procurement for the entire group with no recurring license fees. An open, portable data model — your data remains fully under your control.
Four language localizations
Interface and outputs in CZ / SK / EN / PL. The methodological content and terminology cover the Slovak ZoKB (NBÚ), the Czech ZKB (NÚKIB) and the Polish uKSC — unified management across a multinational group.
Built-in AI security
Registration of AI systems as assets, assessment of AI-specific risks and a policy for their secure use — accounting for both NIS2 and the EU AI Act. Fully on-premise, with no data sent to an LLM.
Audit outputs for your regulator
Automatic generation of the Risk Assessment Report, the Statement of Applicability (SoA) and the Risk Treatment Plan in PDF format (editable as well).
The G1–G9 core and detachable add-on modules
The mandatory core covers the security measures required by Article 21 of NIS2; the add-ons complement the capabilities that competitors showcase — delivered as optional, detachable modules.
Control catalogue
NIS2 security measures
SoA
Statement of Applicability
Group model
Multi-entity service register
Risk analysis
P × E × D, residual risk
Vulnerabilities
Import of scans and pentests
Audit trail
Who, what, when — immutable record
License
Ed25519 signature, offline activation
Implementation & SLA
Deployment and support
PKI / certificates
Root CA, certificate issuance
Continuity BCM/BIA
MTPD / RTO / RPO, plans
Processes · RACI
Workflow, kanban, RACI matrix
ESG / ISO 27001
93 controls, ESG register
Praetorix AE — Artificial Expert
An expert system on your own infrastructure: vulnerability verification with proof, binary decompilation and control of the communication perimeter. Delivered as the Praetorix HW appliance. Learn more →
Not just software — also the real technical state of your infrastructure
Our own SIEM and agent telemetry
Vigil — our SIEM with a tamper-evident audit trail and NIS2 Article 23 incident reporting — is deployed in production. It is complemented by our own Windows and Android agents at MVP stage: endpoint and network telemetry, IOC- and signature-based detection, and reversible, time-limited response. Risk analysis therefore draws on continuous monitoring, not just one-off scans.
Lower TCO than SaaS
A perpetual license for the entire group instead of a recurring subscription — predictable costs across the whole lifecycle.
Interconnected data model
Links service → asset → risk → measure. A change in one place propagates across the analysis, the SoA and the audit outputs.
Access with TOTP and e-signatures
Login with username + password + 6-digit TOTP, organizational signature seals and time anchors over the outputs.
From ticket to live demo in three steps
Access to the system is invite-only. After verification you receive an access code to the demo instance and a live demo date.
You fill in a ticket
You leave basic details about your organization and area of interest. The system generates a unique ticket reference number PRX-DEMO-XXXX.
We approve access
We verify and approve the request. You receive an access code to the Praetorix demo instance and we propose a demo date.
Live demo (2 h)
We demonstrate coverage of the mandatory core G1–G9, the outputs for your national regulator and the multilingual environment on a real scenario — with no obligation.
Request an access ticket
Fill in the form — we will create a registered ticket for you and get back to you within 24 hours with an access code and a demo date.
- No obligation and no cost
- Registered ticket with a reference number
- Personal contact and a date within 24 hours
- Access to the demo instance after approval
Perpetual license for the entire group
A one-off procurement with no recurring license fees. The mandatory G1–G9 core is included; add-on modules are detachable and optional. A detailed price quote is available on request.
What you need to know
Where does the data run and is anything processed via the cloud?+
The solution runs exclusively on-premise, within the client's computing environment. Neither document content nor sensitive data is processed through any external services or language models (LLM). The architecture is designed for critical infrastructure operators.
What about the license — subscription or one-off?+
It is a perpetual (unlimited-term) license for the entire group, procured as a one-off, with no recurring license fees. Only the cost of optional annual maintenance and support is variable. As a result, the TCO is significantly more favourable than with SaaS models.
Which NIS2 requirements does the system cover?+
The security measures required by Article 21 of NIS2 and its national transposition — asset registration and management, multi-entity group model, risk register, full risk analysis, Statement of Applicability (SoA), vulnerability import, audit outputs and a complete audit trail. The outputs are usable to demonstrate compliance to your national regulator.
In which languages is the system available?+
In four localizations — Czech, Slovak, English and Polish. The methodological content and terminology cover the Slovak ZoKB (NBÚ), the Czech ZKB (NÚKIB) and the Polish uKSC.
What does the ticket contain and what happens next?+
After you submit the form, a registered ticket is created with the reference number PRX-DEMO-XXXX. We verify the request, approve access and get back to you within 24 hours with an access code to the demo instance and a proposed date for an approx. 2-hour live demo. No obligation.
Ready to see NIS2 compliance live?
Get an access ticket and within 24 hours we will demonstrate the entire solution on a real scenario.
Get an access ticket →