Does NIS2 apply to mid-sized companies too?

Yes. NIS2 generally applies from 50 employees or EUR 10 million annual turnover to companies in the affected sectors, including manufacturing, food, chemicals, logistics and IT services. Many mid-sized companies are also affected indirectly because customers pass the requirements on to their suppliers contractually.

How much time does blacklens.io take per week?

Detection runs without your involvement. Plan for a weekly look at the prioritised findings and working through the top items; notification policies make sure you are only interrupted for critical issues in between. Explainable AI saves the research into what a finding means and how to fix it.

Do we need security expertise in the team?

No. Every finding is explained in plain language, including root cause, impact, remediation and compensating controls. The remediation plan groups open findings by shared root cause and ranks them by risk reduction and effort. If you want to hand over operations entirely, we work with MSSP partners who offer blacklens.io as a managed service.

How do internal scans work without a consulting project?

Internal scans are handled by Sentry, a scanner appliance for your network. It runs as a VM on VMware, Hyper-V or Proxmox or as a Docker container and is enrolled with a one-time token. Sentry scans servers, clients, printers, cameras, network devices and Active Directory without software on every endpoint. Five Sentry assets are included per workspace.

What does blacklens.io cost?

The price scales with the number of monitored assets and the chosen modules such as dark web monitoring or Sentry; reports, API and integrations are included. You get a price indication for your scope through the pricing page, usually within one business day. You can try it free for 14 days without a credit card, with the full feature set.

Can we get it through our IT service provider?

Yes. blacklens.io is also offered through resellers and managed security service providers. Your provider can run the platform for you, receive alerts and handle remediation, while you can see the current state at any time with your own access. Multi-tenancy, roles and scheduled reports are built in for this.

What happens to our data?

The platform is hosted in ISO 27001 and SOC 2 certified data centres in the DACH region, the scan infrastructure is located exclusively in Austria, Germany and Switzerland. Scans come from fixed source IP ranges. The AI features run on a self-hosted LLM; no external AI providers are used. You decide per workspace whether AI features are active.

Mid-sized companies

Enterprise security for mid-sized companies, no SOC needed

Two people in IT, the same attackers as a corporation. blacklens.io shows what is attackable from outside and inside and tells you what to fix first.

Start free trial Book a demo

No credit card. No setup effort. Results within 24 hours.

Attack surface of beispiel-gmbh.at

Exposure score 71/100

Assets

112

Services

critical

Criticalvpn.beispiel-gmbh.atFortiGate SSL-VPN 7.0.12CVE-2024-21762, KEV

Highmail.beispiel-gmbh.atExchange 2019 CU12EPSS 0.91

Highdev-old.beispiel-gmbh.atGitLab 15.2, Shadow ITUnknown asset

Mediumshop.beispiel-gmbh.atnginx 1.24, TLS 1.2Certificate expires in 9 days

Highbeispiel-gmbh-login.comLookalike, registered 3 days agoPhishing preparation

Dark web: compromised identities

m.huber@beispiel-gmbh.atStealer-Log (RedLine), 2 h ago

Session-Cookie M365Combolist, yesterday

Sample data. Get your own view with the exposure check.

Same attackers, smaller team

For companies with 50 to 2,000 employees: corporate-level scrutiny, mid-sized resources.

No SOC of your own

Neither affordable nor staffable.

A small IT team

Security runs alongside printers and the ERP.

The same requirements

Customer audits, cyber insurers and NIS2 ask as they would a corporation.

Too much raw data

A thousand findings do not help. What matters is what to do first.

What a two-person IT team gets

An analyst's work: detect, prioritise, explain, prove.

Fix firstsorted by risk

1CVE-2024-21762vpn.beispiel-gmbh.atKEV

2CVE-2024-21410mail.beispiel-gmbh.atKEV

3TLS 1.0 enabledshop.beispiel-gmbh.atMedium

Priorities, not a list

EPSS, CISA KEV and exploit status per finding. The most urgent is at the top.

AI explanationself-hosted LLM

CVE-2024-21762vpn.beispiel-gmbh.atKEVCritical

Root cause: Outdated FortiOS version on the SSL VPN gateway.
Impact: Attackers can execute code without logging in.
Remediation: Update to FortiOS 7.0.14 or later.

Explanations in plain language

Root cause, impact and remediation per finding, clearly explained.

Sentry in the internal networkonline

Active Directory12 accounts without sign-in for 90 daysMedium

Internal scans without a project

As a VM or Docker container, five Sentry assets included.

Compromised identities3 new hits

m.hu•••@beispiel-gmbh.atStealer log, 2 h agoEmployee

Microsoft 365 session cookieStealer log, 5 h agoEmployee

k.wa•••@gmx.atCombolist, 3 days agoCustomer

Dark web monitoring

Leaked passwords and sessions of your employees, matched daily.

Early warning47 min ago

CVE-2024-21762FortiOS SSL-VPNCritical

CVE published08:12
2 assets in your inventory affected09:00
Confirmed by PoC scan09:26
Alert sent to Microsoft Teams09:27

Early warning

New CVEs matched in real time against your inventory, alerts by push.

Visuals show sample data.

Reports management actually reads

Executive report for management, vulnerability report for IT, pentest report for customers and insurers. Scheduled by email.

Reportsscheduled by email

PDFExecutive reportWeekly, Monday 07:00

PDFVulnerability reportMonthly

PDFPentest reportAfter every test

Management, head of IT

For the head of IT
Prioritised findings: what needs doing this week.
For the managing director
An exposure score from 0 to 100 with its trend.
Alerts where you already are
Email, Teams, Slack or push, filtered by severity.

How to start

1
Start
Enter your domains
External discovery starts immediately.
2
Within 24 hours
Review results
Assets, vulnerabilities and dark web findings, explained and prioritised.
3
At your own pace
Extend
Connect cloud, roll out Sentry, route alerts to Teams or Jira.

Made in Austria, hosted in the DACH region

Platform in ISO 27001 and SOC 2 certified data centres, scans only from Austria, Germany and Switzerland, self-hosted LLM/AI, support in German and English.

See pricing

Where your data is processed

PlatformDACH data centres, ISO 27001, SOC 2

Scan infrastructureAustria, Germany, Switzerland

AI analysisSelf-hosted LLM, no external providers

Fixed source IP rangesAllow in firewall, WAF and IDS

Priced by scope
Scales with assets and modules.
14-day free trial
Full feature set, no credit card.
Through your IT provider
Also via resellers and MSSP partners.

What mid-sized customers say

Companies that run blacklens.io without their own SOC.

“blacklens.io is the ideal complement to our internal IT security measures. It continuously checks our externally reachable systems, tells us when action is needed and is an important building block of our cyber defence.”

Christian Mondl, Smarter Ecommerce GmbH

“We were looking for a tool for automated penetration tests. What we found was a platform that lets us identify far more than potential entry points. Real added value for our SecOps.”

Christian Rohrmoser, Mayr Schulmöbel GmbH

“blacklens.io helps us meet the state of the art by flagging vulnerabilities on externally available services very quickly. Together with dark web monitoring, visibility of IT and information security risks improved significantly.”

IT department, Hauser GmbH

Frequently asked questions

: Yes. NIS2 generally applies from 50 employees or EUR 10 million annual turnover to companies in the affected sectors, including manufacturing, food, chemicals, logistics and IT services. Many mid-sized companies are also affected indirectly because customers pass the requirements on to their suppliers contractually.
: Detection runs without your involvement. Plan for a weekly look at the prioritised findings and working through the top items; notification policies make sure you are only interrupted for critical issues in between. Explainable AI saves the research into what a finding means and how to fix it.
: No. Every finding is explained in plain language, including root cause, impact, remediation and compensating controls. The remediation plan groups open findings by shared root cause and ranks them by risk reduction and effort. If you want to hand over operations entirely, we work with MSSP partners who offer blacklens.io as a managed service.
: Internal scans are handled by Sentry, a scanner appliance for your network. It runs as a VM on VMware, Hyper-V or Proxmox or as a Docker container and is enrolled with a one-time token. Sentry scans servers, clients, printers, cameras, network devices and Active Directory without software on every endpoint. Five Sentry assets are included per workspace.
: The price scales with the number of monitored assets and the chosen modules such as dark web monitoring or Sentry; reports, API and integrations are included. You get a price indication for your scope through the pricing page, usually within one business day. You can try it free for 14 days without a credit card, with the full feature set.
: Yes. blacklens.io is also offered through resellers and managed security service providers. Your provider can run the platform for you, receive alerts and handle remediation, while you can see the current state at any time with your own access. Multi-tenancy, roles and scheduled reports are built in for this.
: The platform is hosted in ISO 27001 and SOC 2 certified data centres in the DACH region, the scan infrastructure is located exclusively in Austria, Germany and Switzerland. Scans come from fixed source IP ranges. The AI features run on a self-hosted LLM; no external AI providers are used. You decide per workspace whether AI features are active.

Free exposure check

What attackers find about your domain, in seconds.

Pricing

Licensed by assets and users, request a price indication.

NIS2

Whether you are affected and what is required technically.

Cyber insurance

Answer the insurer's questionnaire with data.

Know where you stand in 24 hours

Enter your domains, try free for 14 days, no credit card. Or let us show you the platform in 30 minutes.

Try free for 14 days Book a demo

14 days free, all features
No credit card required
We walk you through your first findings