OpenKAT as a managed service
Running OpenKAT yourself requires a Linux environment, update discipline and someone who can interpret the results. The insights it produces require none of that. Exposentry hosts OpenKAT for you as a managed service: you verify your domain, the first scan starts the same day and you receive forensically grounded reports in plain language.
OpenKAT is free and open source, built at the Dutch Ministry of Health and continued since early 2026 by the community under the LibreKAT Foundation. No law mandates the tool, and no provider offers 'the official' SaaS version. Not even Exposentry.
What Exposentry is: a managed service, built on top of OpenKAT, by people who contribute to OpenKAT itself.
If you come across providers presenting themselves as a mandatory government platform, first read What is OpenKAT, and what it is not.
A service is only finished when there is nothing left for you to install. That is why Exposentry works without hardware, agents or your own server environment:
Your full external attack surface in view: domains, subdomains, certificates, open ports and known vulnerabilities.
Every report records what was found, how and when. Usable towards clients, auditors and insurers.
Your data stays in European data centers, outside the reach of the US CLOUD Act.
Transparent pricing, available online: a one-time baseline scan for €495 or continuous monitoring from €249 per month.
Three routes, one honest decision. Choose based on how much you want to keep in your own hands.
| Run it yourself | In your environment, with help | As SaaS via Exposentry | |
|---|---|---|---|
| Software | Free (EUPL 1.2) | Free (EUPL 1.2) | Included |
| Hosting and updates | You | Your environment, managed by Hasecon | Exposentry |
| Interpretation and reporting | You | Together | Included, forensically grounded |
| Best for | Your own infra team | Data residency, air-gapped, government frameworks | Results without operational burden |
| Cost | Your own hours and infrastructure | Custom quote | From €249/month |
Torn between the second and third route? That is a legitimate trade-off about control, not about quality. Both routes run on the same open-source engine.
Exposentry was created by Edward Hasekamp, core maintainer of the OpenKAT project. Problems that surface in practice get fixed in the source code itself, not around it. You see that in the service: new detections and fixes land in the open-source project first and in your monitoring right after. Verify it yourself on GitHub.
No. The government has in fact transferred stewardship to the LibreKAT Foundation. Providers presenting themselves as an official or mandatory government platform are making a claim the facts do not support.
At Exposentry from €249 per month, or a one-time baseline scan for €495 that is fully credited against a yearly subscription taken out within 60 days. The open-source tool itself remains free, always.
Hasecon manages OpenKAT in your environment: your servers, your data residency, custom boefjes included. Exposentry delivers the results as a subscription, without you needing an environment at all. Same engine, different place for the controls.
Yes. You verify your domains and monitoring continues where your own installation left off. Your historical data remains yours; ask about the options during the baseline scan.
No. NIS2 and the Dutch Cyberbeveiligingswet do not mandate any tool by name. The law requires appropriate, demonstrable measures; continuous monitoring is a defensible building block for that, not a compliance guarantee.
Operational the same day: sign up, verify your domain via a DNS record, first scan runs.
Prefer OpenKAT in your own environment? Hasecon provides implementation, management and custom development →