Be audit-ready across NIS2, GDPR, ISO 27001 and more,
without the GRC overhead.
Run assessments, manage controls, policies and risks, and stay on top of EU reporting deadlines in one platform. Start free in 15 minutes.
15-minute baseline across 9 frameworks with scoring, graphs, and prioritised gaps.
Controls, policies, evidence, vendors, assets, risks, DPIAs and incidents in one place.
Built-in timelines for GDPR (72h), NIS2 (24h) and DORA (4h) notifications.
Built for SMEs. Scales to multinationals across the EU, UK and worldwide.
Choose your path
Two ways to read this page
SME CEO / Owner
Get a clear baseline, a prioritised plan, and audit-ready documentation, without hiring a full team.
Show me the SME viewSecurity / Risk Lead
Operationalise controls and evidence across frameworks, manage vendors and incidents, and streamline audits.
Show me the Security/Risk viewHow it works
Three steps to a defensible posture
Run an assessment
About 15 minutes across any supported framework. No setup calls, no professional services.
Get gaps + actions
Prioritised remediation mapped to controls, with an actions board you can hand to your team.
Stay audit-ready
Policies, evidence, vendors and reporting deadlines tracked continuously, not just before audits.
For SME CEOs
Know where you stand, what to fix, and what "good" looks like.
Clear posture snapshot
Across NIS2, GDPR, ISO 27001 and more: one score, one view of progress.
Policies drafted quickly
AI drafts your starting policy suite, ready for review and approval.
Practical actions board
Track progress and accountability with effort/impact priorities.
No setup calls. No credit card. Just run your first assessment.
For Security & Risk Leads
Operationalise controls, evidence and audits across every framework you care about.
Cross-framework controls
Map once, satisfy many. Evidence and assessment auto-linking, no spreadsheets.
Audit-ready by default
Time-boxed auditor access, structured reporting and a tamper-evident activity trail.
Risk, vendors, incidents
Vendor questionnaires, asset criticality, GDPR/NIS2/DORA notifications and DPIAs end-to-end.
9 Frameworks
Start in Ireland. Scale across the EU and UK.
Full coverage across EU, UK and international frameworks, with more added regularly.
NIST CSF 2.0
6 functions, 22 categories. The gold standard for cybersecurity posture.
NIS2 Directive
8 domains, 25 requirements. EU cybersecurity for essential entities.
GDPR
7 domains, 28 requirements. EU data protection & privacy.
ISO 27001
4 control domains, 35 controls. International ISMS standard.
DORA
5 domains, 14 requirements. Digital resilience for financial services.
SOC 2
5 trust criteria, 18 controls. Security & privacy for SaaS.
Cyber Essentials
5 technical controls. UK government security scheme.
EU AI Act
5 domains, 18 requirements. EU AI regulation compliance.
PCI DSS 4.0
6 groups, 12 requirements. Payment card data security.
18 Modules · 4 outcomes
Everything you need. Nothing you don't.
Eighteen integrated modules grouped into the four outcomes that matter: assess, govern, manage risk, respond.
Assess & Benchmark
Assessments
9 frameworks, AI scoring per category, spider graphs, target maturity overlay.
Dashboard
Drag, collapse, reorder. Compliance snapshot, trends, benchmarks, calendar widget.
Govern & Prove
Controls
Cross-framework controls with status, evidence and assessment auto-linking.
Policies
Versioned policies, control mappings, employee acknowledgments. AI drafter included.
Activity Feed
Tamper-evident trail with PII pseudonymisation, comments and @mentions.
Team Management
Org accounts, roles, time-boxed read-only auditor access, comments.
Bulk Import
Risks, assets, vendors. Preview + validate + confirm. No 200-row hand entry.
Manage Risk
Risk Register
5×5 grid + FAIR-lite quantitative loss expectancy + treatment plans.
Vendor Management
Lite + Standard questionnaires. Auto-generates risks from poor scores.
Asset Inventory
Criticality, classification, ownership and control links in one place.
Actions Board
Kanban board with effort/impact priorities, assignment and due dates.
Compliance Calendar
Unified view of audits, reviews, evidence expiries and contract renewals.
Respond & Improve
Incident Management
Auto 72h GDPR / 24h NIS2 / 4h DORA deadlines. AI drafts regulator notification.
Network Scanner
NMAP scans with AI analysis of open ports and vulnerabilities.
Pen Tests
Structured engagement records with findings, retest schedule, risk linkage.
ROPA (Art. 30)
GDPR Art. 30 records of processing activities. Regulator-ready CSV export.
DPIA (Art. 35)
6-step wizard with auto Art. 36 prior-consultation trigger.
Security Controls
Forced MFA, login anomaly detection, trusted devices, tenant policy.
AI-Powered
Five AI features. One unified credit pool.
Built into the platform. Generous monthly allowances on every paid tier. No surprise overage bills, no margin death-spiral.
AI Assessment Analysis
Each category individually analysed with full business context: 2 to 3 paragraphs per category, bundled into every assessment.
AI Policy Drafter
Pick a policy type, scope, and framework. AI drafts a tailored policy you can review, edit and save as a versioned draft.
AI Evidence Judge
Upload a file and get a verdict (satisfies, partial, or does not satisfy) with reasoning and improvement suggestions.
AI Incident Notifications
Automatically drafts regulator-ready notifications with correct deadlines for GDPR, NIS2, and DORA incidents.
AI Gap Analysis
Finds gaps across your controls and frameworks, prioritises remediation, and keeps you continuously audit-ready.
Pricing
Start for free. Scale when ready.
No credit card required to get started. Your first assessment takes around 15 minutes.
Starter
Everything you need to run your first assessment and understand your posture.
- 1 framework assessment
- Controls & risk register
- Basic policy library
- 1 user
- AI assessment analysis included
Professional
All 9 frameworks, unlimited users, full AI credit pool, and priority support.
- All 9 frameworks
- All 18 modules
- 5 AI features (shared credit pool)
- Unlimited users
- Auditor access (time-boxed)
- Priority support
Consulting Services
Prefer hands-on support?
ShieldIQ's Dublin-based consultants step in when you need another person on the team: Virtual CISO, GRC programmes, strategic planning and incident response.
Explore consulting servicesSee your compliance posture in 15 minutes,
and leave with a prioritised plan.
Free to start. No credit card. No setup calls. Just sign up and run your first assessment across any of the 9 supported frameworks.
Start free todayQuestions? Email info@shieldiqcyber.com