← H2 Labs

Pricing · in euros, excluding VAT

What it costs to stop
doing it later.

Security gets agreed in principle, then left for a quieter month. We do the work every month, so you don’t have to. Two first steps are free, the assessment has a fixed fee, and you can stop a plan with 30 days’ notice. Prices are the same across the EU.

Three plans, all of the work done by us

In every plan we find what runs, carry out the updates, watch for attacks and keep the record. The plans differ in how closely we watch and how much cover comes with them.

Every hour

Complete

from €6,400 a month

€9,780 a month for the example estate

The work
Find, fix, watch and show: all of it, done by us
When something happens
An automatic first response, and one of us on it at any hour
Incident response
16 hours a year included
Recovery rehearsal
Twice a year
Review with your management
Every quarter

Our suggestion to start

Every day

Managed

from €3,900 a month

€5,860 a month for the example estate

The work
Find, fix, watch and show: all of it, done by us
When something happens
An automatic first response at any hour, and one of us on it from 07:00 to 22:00, every day
Incident response
8 hours a year included
Recovery rehearsal
Once a year
Review with your management
Twice a year

Working days

Essentials

from €2,400 a month

€3,780 a month for the example estate

The work
Find, fix, watch and show: all of it, done by us
When something happens
An automatic first response at any hour, and one of us on it from 08:00 to 18:00 on working days
Incident response
At the client rate
Recovery rehearsal
On request
Review with your management
Once a year

The example estate: 150 people on two sites, with 40 servers and 300 other devices on the network, from firewalls and switches to everything else the inventory finds. Per system, the three plans come to about €29, €17 and €11 a month.

The starting prices are for one site with up to 10 servers and 100 other devices. Yours follows what the inventory finds. Laptops and desktops, and industrial systems, are quoted from the inventory. Times are Brussels time.

Training for your people comes with every plan. If your team wants to keep part of the work, we price that split from the same plans.

A little more than usual, with every plan

Small things decide how a bad day goes. These come with every plan, set up in its first month.

01

Two hardware keys for each administrator

A YubiKey or a Nitrokey for each person who runs your systems, and a spare for your safe. One touch signs them in to your single sign-on, carries their SSH keys and confirms each sudo on the servers.

02

Break-glass access that works when the sign-on is down

The same keys open the servers directly, without the single sign-on they may have to repair. Each one is held by a named person, and twice a year we check that it still opens.

03

A way back from every change

Each update goes in at a time that suits your business and is written down before it is made, with the previous version kept ready to return to.

The budget it takes

Everyone agrees security matters. Then it waits for a quieter month, something quick gets done, and it waits again. That gap is the one attackers count on.

13%of IT budgets go to cybersecurity at managed IT service providers, the most exposed sector; 9% across all sectors

63%of organisations take a month or more to apply critical patches to critical systems; 28% take more than three months

94%of smaller companies find it hard to hire cybersecurity staff, and 83% of large ones

Source: ENISA, NIS Investments 2025, a survey of 1,080 organisations in the EU, published 8 December 2025.

What the more exposed sectors set aside

The more a business depends on its systems, and the more others depend on it, the larger the share it puts into security. For a company with €25 million in turnover, the sector medians come to:

Table 1 Security budgets in the more exposed sectors, from ENISA’s sector medians.
SectorIT, share of turnoverSecurity, share of ITA month, at €25 million turnover
Managed IT services8.9%13.3%about €24,700
Digital infrastructure: data centres, cloud, telecoms8.2%11.5%about €19,600
Financial market infrastructure7.2%10.5%about €15,800
Banking6.1%9.4%about €11,900
Health5.0%9.0%about €9,400

ENISA, NIS Investments 2025, survey data companion: sector medians (Figures 33 and 39). The monthly figure multiplies the two medians, so read it as an order of size.

For the example estate, Complete costs €9,780 a month and Managed €5,860. With us, the budget buys the work itself, every month: updates carried out, attacks answered and every step on the record.

A team of your own. Watching every hour of the year takes about five people: a year has 8,760 hours, and one person works about 1,700 of them after leave and holidays. At €5,000 a month each, that is €25,000 a month in salaries, before tools, training and the people you cannot find.

The assessment, at two speeds

After the free inventory, the assessment turns what runs into priorities, risks, a plan and a quote, from the inventory and a review with the people who run your systems. The fee is fixed.

Accelerated

€14,250

In two weeks, for an audit, an insurer’s questions or another deadline.

Standard

€9,500

In four weeks.

Both count from the inventory’s readout. If a plan starts within six months, the fee comes off its setup and your first invoices. Setting up a plan (installing the tools, the first full inventory and the first training) costs one month of the plan, once.

When an attack is under way

Emergency response within hours, subject to availability and authorised access. When several organisations call at once, clients come first.

Without a plan

€280 an hour

The first eight hours, €2,240, are paid when the work starts.

With a plan

€210 an hour

After the hours included in your plan.

Scope, spending authority and the next decision point are agreed before anyone intervenes. Read how a response runs, or request incident assistance →

Terms

Month to month

Plans run monthly, and you can stop with 30 days’ notice.

Twelve months

Sign for a year and the price stays fixed for that year, with one more recovery rehearsal.

If you stop

The tools on your systems keep running, and the inventory and the record stay yours. Our watching, updates and reports end with the notice.

Connecting your tools

A tool we already connect to costs only the setup hours. A new one we build at €160 an hour, estimated first, and your plan keeps it working.

VAT

Prices are in euros and exclude VAT. Businesses elsewhere in the EU account for the VAT themselves, under the reverse charge.

Where we work

Remotely, anywhere in the EU, in English or Romanian, and on site when the work needs it. Travel is billed at cost.

Start with a free inventory

Most of the work starts with knowing what runs. We read it from your systems with your permission, then give you a 45-minute readout with one real finding and a straight answer on whether you need us.

  1. FreeInventory. What runs on your systems and what is exposed, read on the dates you agree. You keep the results.
  2. €9,500Assessment. Priorities, risks, a plan and a quote, for a fixed fee, excluding VAT, credited against the work that follows.
  3. MonthlyOngoing protection. From €2,400 a month: we apply your updates, watch your systems, record every action and send a short report each month.