Resources / Vardion and Centraleyes
Vardion and Centraleyes for Greek NIS2 compared
Read on 24 October 2026, each fact cited
Centraleyes is a US cloud GRC platform with a module built on the 234-question self-assessment of Greece's National Cybersecurity Authority (ΕΑΚ) and more than 180 frameworks. Vardion carries both ΕΑΚ instruments in the authority's own Greek, with scan evidence beside them.
- Centraleyes offers a 30-day free trial and maps the Greek self-assessment to CIS, ISO 27001 and NIST CSF.
- Vardion adds the 169-control gap analysis, KYA 1689/2025 article mapping and the authority's file formats.
Centraleyes: not published; priced by the number of frameworks and vendors, with unlimited users[3]. Vardion: from €290 a month, billed yearly (pricing).
Side by side
| Centraleyes | Vardion | |
|---|---|---|
| ΕΑΚ self-assessment | 234 questions in 19 sections, scored, with 20 policy templates for its policy questions[1] | The ΕΑΚ gap analysis (169 controls in 24 sections) and self-assessment (234 questions), in the authority's own Greek and its file formats[5] |
| ΕΑΚ gap analysis and KYA | The Greek module page describes the self-assessment; a gap analysis and an export in the authority's format are not stated on it[1] | KYA 1689/2025 article by article, with policy drafts in English and Greek[6] |
| Frameworks | More than 180 frameworks, standards and regulations[2] | KYA 1689/2025, NIS2, DORA, ISO 27001 and the frameworks on the compliance page[6] |
| Scanning | External scans of vendors[3] | Finds what the company exposes to the internet and ranks it by what attackers exploit. Takes in Tenable, Qualys and Defender results by API and Nessus, OpenVAS and Burp files[7][8] |
| Languages | Not stated on the pages read[1][2] | Console, reports and policy drafts in Greek and English[10] |
| Deployment | Cloud platform; headquarters in Hoboken and New York[2] | On Vardion's hosted console for the programme, email and DNS checks and imported results; on your own Linux server with Docker for all of it, scans included[9] |
| Trial and price | 30-day free trial; price by frameworks and vendors, not published[3][4] | A free domain check; from €290 a month |
Choose Centraleyes if
- You need many frameworks beyond NIS2, from SOC 2 to US privacy laws.
- You want to start with a free 30-day trial.
- Your Greek self-assessment should feed a risk register mapped to CIS, ISO 27001 and NIST CSF.
Choose Vardion if
- You must answer the 169-control gap analysis as well as the self-assessment.
- You want the work in the authority's own Greek and its files, and reports in Greek for your board.
- You want scan evidence behind your answers, or the platform on your own server.
Scored comparison
2: the product's own pages state it. 1: in part, or sold separately. 0: not offered.
| Criterion | Centraleyes | Vardion | Sources |
|---|---|---|---|
| ΕΑΚ self-assessment | 2 | 2 | [1] [5] |
| Breadth of frameworks | 2 | 1 | [2] [6] |
| Scanning of what you expose | 1 | 2 | [3] [7] |
| Free trial | 2 | 0 | [4] |
Which one to choose
If you need a broad framework library and a trial you can start today, Centraleyes offers both. Its Greek module covers the self-assessment.
If your obligation is the ΕΑΚ's two instruments, in Greek, with the evidence from your own scans and the choice of your own server, Vardion is the closer fit.
Sources
- Centraleyes, Greek NIS2 Self-Assessment Tool
- Centraleyes, home page
- Centraleyes, GRC software pricing: what it costs
- Centraleyes, NIS2
- The ΕΑΚ gap analysis (169 controls in 24 sections) and self-assessment (234 questions), in the authority's own Greek and its file formats
- KYA 1689/2025 article by article, with policy drafts in English and Greek
- Finds what the company exposes to the internet and ranks it by what attackers exploit
- Takes in Tenable, Qualys and Defender results by API and Nessus, OpenVAS and Burp files
- On Vardion's hosted console for the programme, email and DNS checks and imported results; on your own Linux server with Docker for all of it, scans included
- Console, reports and policy drafts in Greek and English
- A supplier register with a grade from public records for each supplier, weekly for the critical ones, with questionnaires you send them
- A scope check that says whether NIS2 applies
- Incidents recorded with the significance assessment, the drafted reports and every reporting deadline
- Client workspaces and your own brand for consultancies
Centraleyes and other product names are trademarks of their owners. This page compares public information and is not endorsed by them.
See both ΕΑΚ instruments in Vardion
A 30-minute demo with sample data: the self-assessment, the gap analysis and the scan evidence beside them.