2026 Threat Intelligence: Most EU breaches now end in ransomware.

NIS2 In ForceNIS2 now reaches mid-sized firms — personal management liability and fines up to €7M. Am I in scope? →
All vulnerable roads lead to ransomware

Analyze your attack surface.
Where it breaks.

Nisura maps your external attack surface, prices what a breach would cost you in euros — downtime, recovery, lost deals, fines — and gets it fixed through your MSP, or one we match. From just your domain, with no security team.

Run Free Financial Scan
Deploys in MinutesTransparent € PricingSigned NIS2 Evidence
ALE = ARO × SLE
Live

EPSS · KEV · NVD

live exploit telemetry

up to €10M

NIS2 liability, mapped

NIS2 · GDPR · DORA

regimes quantified in €

Live ransomware CVE radar· 616 tracked · updated 8 Sept

See the full radar →
CVE-2026-59310EPSS 46%

Broadcom · VMware vCenter

Broadcom VMware vCenter Path Traversal Vulnerability

New Exploit Edge
Affinity 0.83KEV · 10 Aug
CVE-2023-54391EPSS 2%

Proxmox Server Solutions GmbH · Proxmox Virtual Environment (VE)

Missing Critical Step in Authentication

New
Affinity 0.35KEV · 1 Sept
CVE-2022-30525EPSS 100%

Zyxel · Multiple Firewalls

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 14 May
CVE-2025-53770EPSS 100%

Microsoft · SharePoint

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Exploit Edge
Affinity 1.00KEV · 18 Jul
CVE-2024-3400EPSS 100%

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS Command Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 12 Apr
CVE-2023-0669EPSS 100%

Fortra · GoAnywhere MFT

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Exploit Edge
Affinity 1.00KEV · 8 Feb
CVE-2024-21887EPSS 100%

Ivanti · Connect Secure and Policy Secure

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Exploit EdgeAkira
Affinity 1.00KEV · 10 Jan
CVE-2022-41082EPSS 100%

Microsoft · Exchange Server

Microsoft Exchange Server Remote Code Execution Vulnerability

Exploit Edge
Affinity 1.00KEV · 29 Sept
CVE-2023-3519EPSS 100%

Citrix · NetScaler ADC and NetScaler Gateway

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 18 Jul
CVE-2021-44529EPSS 99%

Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 29 Feb
CVE-2026-59310EPSS 46%

Broadcom · VMware vCenter

Broadcom VMware vCenter Path Traversal Vulnerability

New Exploit Edge
Affinity 0.83KEV · 10 Aug
CVE-2023-54391EPSS 2%

Proxmox Server Solutions GmbH · Proxmox Virtual Environment (VE)

Missing Critical Step in Authentication

New
Affinity 0.35KEV · 1 Sept
CVE-2022-30525EPSS 100%

Zyxel · Multiple Firewalls

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 14 May
CVE-2025-53770EPSS 100%

Microsoft · SharePoint

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Exploit Edge
Affinity 1.00KEV · 18 Jul
CVE-2024-3400EPSS 100%

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS Command Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 12 Apr
CVE-2023-0669EPSS 100%

Fortra · GoAnywhere MFT

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Exploit Edge
Affinity 1.00KEV · 8 Feb
CVE-2024-21887EPSS 100%

Ivanti · Connect Secure and Policy Secure

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Exploit EdgeAkira
Affinity 1.00KEV · 10 Jan
CVE-2022-41082EPSS 100%

Microsoft · Exchange Server

Microsoft Exchange Server Remote Code Execution Vulnerability

Exploit Edge
Affinity 1.00KEV · 29 Sept
CVE-2023-3519EPSS 100%

Citrix · NetScaler ADC and NetScaler Gateway

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 18 Jul
CVE-2021-44529EPSS 99%

Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Exploit Edge
Affinity 1.00KEV · 29 Feb

Ranked by active-exploitation affinity (CISA KEV + EPSS), not by age. Ransomware reuses proven, weaponised CVEs on exposed edge devices — so a battle-tested 2022 flaw at 100% EPSS outranks a fresh 2026 CVE nobody’s exploiting yet. Why the newest CVE is rarely the most dangerous →

01/The Question
“If your systems are breached by automated ransomware today, exactly how many Euros will you lose in downtime, recovery, and lost client contracts?”

Most boards can’t answer that — not in Euros.

The Answer

The answer is Nisura.

Meet the European Cyber Risk Quantification (CRQ) engine that replaces guesswork with hard financial data.

Article 21 Supplier Evidence

cert_2026-04-18 · Nisura CRQ

Verified
Financial Resilience
Within Tolerance
Modelled exposure 180.000 € · below client threshold
Issued to Your Company GmbHExport PDF

The Core Engine

We completely reject arbitrary grading scales, generic letter grades, and red-amber-green heat maps. Nisura cross-references your live, unpatched external vulnerabilities directly against weaponized ransomware syndicate playbooks and localized European recovery costs.

The result? A mathematically defensible, Euro-centric calculation of your true financial exposure.

  • See Your True Risk: Reveal the hidden vulnerabilities that could cost your business hundreds of thousands of euros in an automated ransomware attack.

  • Pass Enterprise Audits: Instantly export signed, verifiable supplier-security evidence to support your largest clients’ NIS2 Article 21 supplier assessments.

  • Protect Your Revenue: Ensure you never lose a massive corporate contract or face exorbitant insurance premium hikes due to an unquantified security posture.

Run it on your own systems

How Nisura works for you

No security team required. We find your weaknesses, watch them continuously, and get them fixed — through your own MSP, or one we match from our partner pool and broker for you.

Step 1 · Identify & price

Exposure → Euros
Find the weakness an attacker already sees
  1. External attack surface
    Passive OSINT maps what an attacker already sees.
  2. Weaponized CVE match
    Live KEV · EPSS, ransomware-flagged — not raw CVSS.
  3. Localized EU recovery costs
    Eurostat wages · Damodaran-Europe gross margins.
  4. Regulatory liability
    NIS2 tier · GDPR · DORA — size-gated to your org.

Every figure traces back to a live, citable source.

Run a free scan

Steps 2 & 3 · Watch & fix

Monitored. Then handled.

The part mid-market firms miss: someone actually fixes it — with no in-house SOC.

  1. 02
    Monitor continuously

    Nisura keeps watching your surface — new exposed services, newly weaponized CVEs, drift — and flags the moment your risk moves. Not a one-off scan.

  2. 03
    Remediate — via an MSP

    The fixes go to an MSP: your own, or one we match from our partner pool. We broker the engagement — and the next re-scan proves the euro figure dropped.

Passive, consent-based OSINT only — we verify exposure, never exploit it.

Generate your board-ready risk report

No integrations, no login. Model your exposure in under a minute.

  1. 1Scan your exposure

    We passively map the vendors and vulnerabilities an attacker can already see.

  2. 2Add your business context

    Revenue, size, sector and controls turn that exposure into a euro figure.

Open the full simulatorPassive OSINT only — no login, no packets to your servers.

Human Risk

Your people are a risk factor. Now they’re a measured one.

Run authorized simulated-phishing campaigns against your own staff — localized templates in any language (English and German out of the box), from credential lures to QR and callback attacks. The result isn’t a naming-and-shaming report: it’s a workforce click-rate that flows straight into your Expected Annual Loss, and signed evidence of the NIS2 training you’re required to do.

Credential harvestInvoice / BECMFA fatiguePayslip / HRQR (quishing)Callback (TOAD)

Safe by design. Aggregate results only — no individual is identified, and no credential is ever captured (there’s no field to store one).

Legally gated. A campaign can’t launch without signed authorization, an Art. 28 DPA — and a works-council sign-off in AT/DE.

Auditor-ready. Every campaign produces signed, verifiable NIS2 Article 21(2)(g) security-awareness training evidence.

See how it feeds your risk model

Campaign result → Euro impact

aggregate-only
61%
Open rate
18%
Click rate
12%
Reported
Applied to your model: ×1.4 human-risk factor on the credential-access vector — updating your Expected Annual Loss with how your workforce actually behaves.
Signed NIS2 Art. 21(2)(g) evidence · verifiable · aggregate-only

Illustrative figures. Most phishing tools stop at a report; Nisura closes the loop into euros — the human-risk factor CRQ usually ignores.

02/Who is it for?

One platform. Total financial alignment.

Nisura translates technical vulnerabilities into the exact financial and legal language your leadership requires.

For the Founder / CEO
The Owner

Your cyber risk in euros — and what to fix first.

Mid-sized firms are now squarely in NIS2 scope, usually without a dedicated security team. Nisura prices your external exposure in euros and hands you the short list of fixes that move the number most — so budget goes to real risk reduction, not a 500-item scanner dump.

For the IT Director / MSP
The Operator

Keep your enterprise clients & supply-chain contracts.

Large enterprises must now audit their supply chains under NIS2. Generate signed, verifiable Article 21 supplier evidence that proves your posture on demand — so you never lose a major contract to a failed security review.

For Cyber Insurance Renewals
The Policyholder

Secure your cyber-insurance policy.

Insurers are tightening the security controls they require. Use Nisura’s passive scanning to show underwriters a measured, euro-based view of your resilience — and renew without an exorbitant premium hike.

20
Eurozone economies priced
Localized labour & downtime indices
3
EU regimes mapped
NIS2 & GDPR € liability caps · DORA applicability
Live
Threat intelligence
EPSS + VulnCheck exploit feeds
€0
To run your first report
No login, no integration
03/Exposure & Monitoring
Nisura

See what an attacker already sees

Enter your domain for a passive external attack-surface assessment — the exposed vendors, ransomware groups and confirmed-vulnerable services visible from the internet. No login, no packets sent to your servers.

20+

exploit & threat feeds

7

EU-native sources

Continuous asset monitoring

We re-check your perimeter on a schedule and alert on newly exposed vendors, services and ransomware-linked CVEs.

Priced in euros

Exposure becomes an Expected Annual Loss — ALE = ARO × SLE — a board-ready figure, not a traffic-light heatmap.

Regulatory mapping

Every figure is attached to its governing EU liability, so the number is defensible.

NIS2GDPRDORA

Reporting & evidence

Every run produces a board-ready report — the loss curve, the ALE / PML ledger and cited sources attached.

  • Board-ready reportPDF
  • NIS2 Art. 21 evidencesigned
  • Cited sourcesattached
Export with notes & source context

Defensive by design

Passive OSINT only, consent-gated — scan domains you own or are authorized to assess. We assess the surface an attacker sees; we never exploit or retain access, and no credentials are captured.

04/The intelligence stack

The feeds are table stakes. The European model is the moat.

Any serious tool can plug into the same public threat feeds. Turning them into a loss figure that’s actually European — EU labour costs, EU margins, EU sector taxonomy, EU regulatory liability — is the part that isn’t copyable.

Live exploitation & threat feeds · table stakes
CISA KEVVulnCheckEPSS · FIRST.orgMetasploitExploit-DBNucleiPoC-in-GitHubGreyNoiseCISA #StopRansomwareransomware.liveAlienVault OTXRansomwhereHudson Rock
EU-sovereign core · the differentiator 🇪🇺
ENISA EUVDCIRCL · LU CERTCERT-FR · ANSSIEurostat · EU labour costsDamodaran-Europe · marginsNACE / NIS2 taxonomyNIS2 · GDPR · DORA · CRA

Findings are corroborated against Europe’s own sources — ENISA’s EUVD, CIRCL (Luxembourg’s national CERT) and CERT-FR (ANSSI) advisories — while Eurostat wages and Damodaran-Europe margins drive the euro figure and the full EU regulatory stack (NIS2, GDPR, DORA, CRA) is mapped natively. Not US claims data with a € sign taped on.

Sources reflect feeds the engine consumes and the models it applies. Third-party names are trademarks of their respective owners; reference identifies data sources and does not imply endorsement or affiliation.

The Output

Move from reactive patching to proactive financial risk reduction.

Every simulation resolves to a single, defensible figure — the projected annual loss your board can weigh against the cost of controls, cyber insurance premiums, and statutory fine caps.

  • ✓Loss-exceedance curves, not vulnerability counts
  • ✓Statutory NIS2 & GDPR € liability caps, DORA applicability
  • ✓Export to a board-ready PDF in one click

Risk Report

sim_9F3A21C4 · Manufacturing · DE

NIS2 · ImportantHigh
1.250.400 €Expected Annual Loss (ALE)

4.200.000 €

Tail loss · 1-in-100

34%

Annual breach likelihood

3.000.000 €

Max NIS2 exposure

Where the loss comes from

Downtime42%
Business interruption24%
Regulatory fines25%
Forensics & IR9%
Reducible with controls−64%

Partner Ecosystem

Built for the channel. Empower your advisory.

Nisura isn’t just for end-users. We provide multi-tenant risk engines for MSPs, Cyber Brokers, and GRC Consultancies to accelerate their own sales and client outcomes.

For Managed Service Providers (MSPs)

Turn risk into revenue.

Stop pitching technical firewalls. Use Nisura’s multi-tenant dashboard to instantly calculate your client’s ransomware exposure in Euros. Prove the financial ROI of your managed services and close bigger contracts faster.

For GRC Consultancies & Auditors

Automate NIS2 due diligence.

Ditch the massive Excel spreadsheets. Generate mathematically defensible, board-ready compliance reports for your mid-market clients in minutes — massively increasing your firm’s billable margins.

For Cyber Brokers & M&A Firms

Quantify the unseen liability.

Whether you’re underwriting a new cyber policy or running M&A due diligence on a target, Nisura gives you the exact Euro-value of their unmitigated cyber debt before you sign the paperwork.

Explore the Partner Program
05/FAQ

Questions, answered

Expressing cyber risk as money instead of a colour. Nisura computes an Expected Annual Loss in euros — ALE = ARO × SLE — so your board compares it against any other financial risk.

No. The assessment is passive external OSINT only — we map what an attacker can already see from the public internet and never send a packet to your infrastructure. You confirm you are authorized to assess the domain first.

Live exploit telemetry (EPSS, CISA KEV, EUVD) sets the likelihood; EU-native economics (Eurostat labour costs, Damodaran-Europe margins) set the loss magnitude; and the governing regime (NIS2, GDPR or DORA) attaches the statutory liability.

It depends on your sector and size. Our free NIS2 Scope Checker runs the two-part test from Directive (EU) 2022/2555 and tells you whether you are an essential entity, an important entity, or out of scope (GDPR only).

No. There is no login and no integration to run the free assessment — you get a board-ready euro figure in minutes from your external exposure and a few business details.

Nisura is built EU-sovereign — your data stays in the European Union. Nisura is a product of OnDuty AI Solutions GmbH, Vienna, Austria.