The AWARELY ecosystem offer

NIS2 needs controls that work. We provide the platforms that keep them moving.

Learning, Monitor and Secretus address three distinct operational areas: people, vulnerabilities and sensitive-data handoff. Adopt them separately or as one ecosystem.

Check whether NIS2 appliesCompare platforms
Three proprietary products
European infrastructure
Evidence and exports for teams

NIS2 → controls → products

Move from a requirement to a repeatable team workflow.

The platforms do not replace legal analysis, governance or every NIS2 measure. They support implementation and documentation of concrete controls in the security programme.

DNSC Order no. 1/2026: controls and maturity

In force since 27 August 2026, the order approves the national control catalogue and self-assessment methodology. Entity classification, risk assessment and control maturity are separate stages.

Review controls, deadlines and exceptions
/01

Training & cyber hygiene

Awarely Learning

learning.awarely.ro
In development88%

Progress to live launch

PR.AT-01.1 · DNSC Order 1/2026

Prepare people and demonstrate progress.

Supports the staff awareness programme under PR.AT-01.1. Completion certificates do not automatically equate to the accredited training required for governing bodies by OUG 155/2024, Article 14(2).

  • Video, SCORM, quizzes and verifiable certificates
  • Learning paths, deadlines, managers and reporting
  • Phishing simulations without storing entered credentials
  • Audit trail and programme evidence exports

from €79/month

B2B setup · direct offer

Explore LearningProduct offer
/02

Vulnerabilities & effectiveness

Awarely Monitor

monitor.awarely.ro
LaunchedLIVE

Ready to use

ID.RA-01.1 · DNSC Order 1/2026

Turn the CVE stream into a controlled process.

Partially supports ID.RA-01.1 through identification and prioritisation of tracked software vulnerabilities and treatment evidence. The control covers all relevant assets, beyond software.

  • NVD, CISA KEV, EUVD and GitHub Advisories
  • CVSS + EPSS, watchlist and version matching
  • Assignment, SLA, notes, Jira, Linear and alerts
  • Evidence Packs and NIS2 / ISO 27001 reports

from €59/month

14-day Pro trial

Explore MonitorProduct offer
/03

Cryptography & access control

Secretus

secretus.app
LaunchedLIVE

Ready to use

PR.DS-02.2 · DNSC Order 1/2026

Move passwords and secrets out of conversations.

Supports PR.DS-02.2 for sensitive handoffs made through Secretus, through encryption, access and lifecycle controls. The organisation must also protect its other data flows.

  • AES-256-GCM, expiry and revocation
  • X3DH-style + ML-KEM-768 for Maximum Security
  • Shamir k-of-n for distributed approval
  • Audit, request links, MFA, PWA and REST API
  • Firefox Add-on and Chrome Extension

from €9/month

14-day trial · no card

Explore SecretusProduct offer
CRA · Reporting from 11 September 2026

24 hours for the early warning. Prepare the information and the owners.

For manufacturers within CRA scope, the clock starts on awareness of an actively exploited vulnerability or severe incident affecting product security. Awarely Monitor can support assessment of public signals and documentation of actions.

Follow the signals

NVD, CISA KEV, EUVD and GitHub Advisories, aggregated on a scheduled two-hour cycle.

Prioritise and assign

CVSS + EPSS, watchlists, owners and notes. Pro adds version-aware inventory and team integrations.

Document actions

History and evidence exports for internal vulnerability assessment and follow-through.

Official notifications are submitted through the SRP. Monitor does not replace reporting, scope assessment or channels for incidents and unpublished vulnerabilities. A CVE does not automatically trigger reporting, and using the platform does not guarantee CRA compliance.

Use the CRA checklistRead the 24/72-hour guideExplore Awarely Monitor

Start with the real gap

You do not need to buy everything on day one.

Choose the platform that resolves today’s pressure. Together, the three products create a coherent thread across people, technical exposure and information protection.

01

No recurring employee programme or evidence?

Start with Learning.
02

Not sure which CVEs affect the stack or who owns them?

Start with Monitor.
03

Passwords and keys still travel through email or chat?

Start with Secretus.

First step

First find out whether NIS2 applies to your organisation.

The AWARELY checker provides guidance based on sectors, size and exceptions in Romania’s legal framework. DNSC owns the official determination.

Open the NIS2 checker

The platforms do not replace legal analysis, governance or every NIS2 measure. They support implementation and documentation of concrete controls in the security programme.