Request a quote

Modules

17 modules above the Core ISMS.

Cybsis 2.0 is the Core ISMS plus the modules you actually need. Paid modules sell individually from €100/yr; a few items (Modern Authentication and Monitoring) appear in this catalogue marked as included in Core so the features stay discoverable without showing up as line items. The Complete combo bundles 17 paid modules for €14,950/yr — roughly at parity with the à-la-carte stack today, with every future addition folded in at no extra charge.

Configure a bundle →See combos

Five categories

What each kind of module does.

Modules group naturally into five categories. Most customers start with one or two from AI and Compliance, then add Platform or Workflow extensions when scale or integration demands it.

AI

4

Automate the slow parts.

Jump down ↓

Compliance

5

Extend Core ISMS for specific regulatory work.

Jump down ↓

Platform

9

Architectural extensions for larger orgs.

Jump down ↓

Workflow

5

Pull work in from where it actually happens.

Jump down ↓

Authentication

2

Identity beyond the included baseline.

Jump down ↓

AI

Automate the slow parts.

Opt-in features that compress the manual stages of compliance work — risk identification, document drafting, evidence analysis, audit prep — plus a jurisdiction-aware legal assistant for your data protection officer. All bring-your-own-provider: public API key, self-hosted endpoint, or RaulWalter-supplied.

Ludwig — AI Security Specialist

AI

A seasoned information-security specialist in chat form. Reads your live data, proposes actions you approve.

€1,500/yr

BYO key

AI Assistant

AI

In-workflow AI helper. Sparkle buttons across the product for suggestions, drafts, gap analysis, and next-best-action.

€400/yr

BYO key

AI Documents

AI

AI-generated long-form documents — policies, procedures, risk assessments, BCM plans — drafted from your instance data plus a questionnaire.

€600/yr

BYO key

Ludwig DPO — Data Protection Assistant

AI

Extends Ludwig into an assistant to your data protection officer. GDPR and Estonian data-protection law, answered from a verbatim legal corpus with act and § citations.

€900/yr

BYO key

Compliance

Extend Core ISMS for specific regulatory work.

Surfaces the Core ISMS doesn't ship with: full audit campaigns with multi-year cycles, GDPR Article 30 records of processing, third-party / service-provider management.

Internal Audit

Compliance

Plan, run, and document internal audit campaigns — cycles, findings, evidence, meetings, reports.

€900/yr

External Audit

Compliance

Manage external audit campaigns — main audits, follow-ups, evidence packaging, external-auditor collaboration.

€900/yr

Service Provider Registry

Compliance

Vendor management with control linking and contract references. NIS2 / GDPR Art. 28 ready.

€700/yr

Audit Questionnaires

Compliance

Targeted questionnaires for unmet prerequisites — manual or AI-generated, with response tracking and prerequisite cross-references.

€600/yr

Processing Activities (RoPA)

Compliance

GDPR Article 30 record of processing activities, linked to your data assets.

€700/yr

Platform

Architectural extensions for larger orgs.

Run multiple legal entities side-by-side in one installation, or federate data across separate installations for group-level reporting. Buy these when scale or corporate structure demands it.

Federation

Platform

Cross-instance read-only reporting. Hub-and-spoke for holdings, groups, and consultancies.

€2,000/yr

Multi-Instance Framework

Platform

Run multiple legal entities under one tenant. Framework is free; pay €300 per sub-instance per year.

€300 / sub-instance / yr

No framework fee — pay only for sub-instances you use.

Graph

Platform

Walk the relationships between every register — assets, risks, controls, documents, incidents, threats, audits — as a navigable map. Included in every Cybsis instance.

Included in Core ISMS

Monitoring

Platform

Internal ISMS health surface — control-implementation status, evidence freshness, review-cadence visibility. Included in every Cybsis instance.

Included in Core ISMS

Audit Trail

Platform

Every action on every register, attributed, timestamped, searchable. The audit trail that turns "who did what, when" from a question into a query. Included in every Cybsis instance.

Included in Core ISMS

User Activity

Platform

Per-user contribution breakdown across the major registers — who's actually doing the work, in numbers. Sibling view to the Audit Trail. Included in every Cybsis instance.

Included in Core ISMS

AI Watchdog

Platform

Every AI call logged, every Ludwig conversation measured, every euro of inference cost accounted for. Included in every Cybsis instance.

Included in Core ISMS

System Health

Platform

Real-time view of the host server's pulse — CPU, memory, disk, database, backups, integrations, license, AI provider — all on one admin screen. Included in every Cybsis instance.

Included in Core ISMS

System Log

Platform

In-app log viewer for the running container — DEBUG, INFO, WARN, ERROR — filterable and streamed live. Included in every Cybsis instance.

Included in Core ISMS

Workflow

Pull work in from where it actually happens.

Integrations and automation that let Cybsis sit alongside the tools your team already uses, instead of demanding context-switching: Jira, email triage, rule-based automation.

JIRA Connector

Workflow

Bidirectional JIRA integration — push incidents, risks, and corrective actions into JIRA; sync status and comments back.

€700/yr

Microsoft 365 Connector

Workflow

SharePoint and OneDrive document linking via Microsoft Graph, with encrypted tenant credentials.

€100/yr

Email Triage / Service Desk

Workflow

Inbound routing rules, create-incident-from-email, watchers and approvals.

€700/yr

Incident Response

Workflow

SLA tracking with business-hours awareness, automation rules, and regulatory-grade exports for incident handling.

€1,000/yr

Automation Rules

Workflow

Event-driven workflows for incidents and tickets — "when X happens, do Y."

€700/yr

Authentication

Identity beyond the included baseline.

Modern factors on top of password — passkeys (WebAuthn), Estonian ID-card via Web eID, and TARA SSO — plus direct Active Directory / LDAP binding for enterprises that already centralise identity.

Modern Authentication

Authentication

Passkeys (WebAuthn) with hardware-key support, Estonian ID-card via Web eID, and TARA SSO — included in every Cybsis instance.

Included in Core ISMS

Active Directory / LDAP

Authentication

Authenticate against AD or any LDAP directory via LDAP bind — TLS and group-restricted access included.

€100/yr

Before you configure

Two things worth knowing.

Module dependencies

A few modules depend on others — the configurator auto-adds the prerequisite when you pick the dependent module, so you don't have to track this manually.

→Federation requires Multi-Instance Framework
→Ludwig — AI Security Specialist requires AI Assistant
→Ludwig DPO — Data Protection Assistant requires Ludwig — AI Security Specialist

Why Complete compounds over time

Complete bundles all 17 paid modules + 3 standards + 3 sub-instances for €14,950/yr — about €2,600 under the same stack assembled à la carte. The compounding part: every paid module Cybsis ships in the €500–€1,000 band folds into Complete automatically, at no additional charge to existing customers.

Six modules landed in the last release cycle alone. The catalogue keeps growing, Complete's price stays put. By year three the same licence sits materially cheaper than the à-la-carte stack that grew alongside it.

Assemble the bundle, see the price, request a quote.

The configurator does the math; you do the picking. Nothing happens until you submit the quote form — no account, no card, no cart.

Open the configurator Request a quote →