================================================================================

LIST SERVICES AND PRICES – EDIH MICROCYBER

DOGNET TECHNOLOGIES SRL
European Digital Innovation Hub – Cybersecurity & AI Focus
Geographical target: Italy / North Italy (primary: Lombardy)
Customer target: SMEs (10-249 employees), Mid-cap, Startup, PA local

Valid from: 01 November 2026
Version: 1.0

================================================================================

PREMESSA IMPORTANTE

Services are provided under the EDIH MicroCyber co-funded programme
from the Digital Europe Programme (50%) and from Dognet Technologies SRL (50%).

PRICING MODE:

• Rated market price: 100%
• State aid EDIH (State Aid): 90%
• Final customer loading fee: 10%

Example: Service with nominal price € 5.000

• EDIH covers: € 4.500 (90%) – 50% DEP + 50% Dognet
• Customer pays: € 500 (10%)

COMPLIANCE STATE AID:
All services comply with the limits set out in the GBER Regulation (General
Block Exemption Regulation) and/or de minimis scheme for state aid.

================================================================================

CATEGORIA 1: TEST BEFORE INVEST (TBI)

Test Before Invest services allow SMEs and PA to test solutions
cybersecurity and AI before investing, through technical assessment, PoC and
feasibility assessments.

---

TBI-001: VULNERABILITY ASSESSMENT BASE
Target: SMEs, Startup
Duration: 5 days
Rated price: € 4,500
State Aid EDIH: € 4,000 (90%)
Customer pays: € 500 (10%)

Description:
Vulnerability Basic infrastructure assessment on a maximum of 10 assets
(servers, critical workstations, network devices).

Includes:

• Network discovery and asset inventory
• Vulnerability scanning automated
• Identified vulnerability analysis
• Risk assessment and prioritization
• Technical report + executive summary
• Remediation plan base

Tool: Nessus, OpenVAS, Nmap

---

TBI-002: VULNERABILITY ASSESSMENT COMPLETED
Target: SMEs, Mid-cap
Duration: 10 days
Rated price: € 8.500
State Aid EDIH: € 7.650 (90%)
Customer pays: € 850 (10%)

Description:
Vulnerability Full assessment on extended IT infrastructure (up to 50 assets).

Includes:

• Full Network Discovery
• Vulnerability scanning (internal + external)
• Configuration review
• Patch management assessment
• Database security review (base)
• Detailed report + remediation roadmap
• Presentation session results

Tool: Nessus Professional, OpenVAS, Nmap, CIS-CAT

---

TBI-003: PENETRATION TESTING NETWORK
Target: SMEs, Mid-cap
Duration: 10 days
Rated price: € 12.000
State Aid EDIH: € 10.800 (90%)
Customer pays: € 1.200 (10%)

Description:
Penetration Testing on network infrastructure (internal and external).

Includes:

• Network reconnaissance
• Vulnerability exploitation
• Privilege escalation attributes
• Lateral movement
• Post-exploitation analysis
• Full technical report with PoC
• Remediation guidance

Methodology: PTES, OWASP
Tool: Metasploit, Nmap, Burp, custom scripts

---

TBI-004: PENETRATION TESTING WEB APPLICATION
Target: SMEs, Startup (with web app)
Duration: 12 days
Rated price: € 14.000
State Aid EDIH: € 12.600 (90%)
Customer pays: € 1.400 (10%)

Description:
Penetration Testing complete web application according to OWASP methodology.

Includes:

• OWASP Top 10 full testing
• Business logic testing
• Authentication/Authorization testing
• Session management review
• API security testing (if present)
• Detailed report with PoC
• Remediation detailed guidance
• Optional Re-test (50 % discount)

Methodology: OWASP Testing Guide
Tool: Burp Suite Pro, OWASP ZAP, SQLMap

---

TBI-005: MOBILE APP SECURITY ASSESSMENT
Target: Startup, SMEs (with mobile app)
Duration: 10 days
Rated price: € 13.000
State Aid EDIH: € 11.700 (90%)
Customer pays: € 1.300 (10%)

Description:
Security assessment app mobile Android and/or iOS according to OWASP MASVS.

Includes:

• Static analysis (SAST)
• Dynamic analysis (DAST)
• Reverse engineering (APK/IPA)
• Insecure data storage review
• Communication security
• Backend API security review
• MASVS compliance report
• Secure development recommendations

Methodology: OWASP MASVS, MSTG
Tool: MobSF, Frida, Burp Mobile Assistant

---

TBI-006: AI SECURITY & READINESS ASSESSMENT
Target: SMEs, Startup (AI implementation)
Duration: 8 days
Rated price: € 9.500
State Aid EDIH: € 8.550 (90%)
Customer pays: € 950 (10%)

Description:
AI-based security assessment and corporate readiness for
safe adoption of AI.

Includes:

• AI system security
• Data security and privacy assessment
• Model security testing (adversarial attacks, poisoning)
• AI Act compliance gap analysis (EU 2024/1689)
• Risk assessment AI deployment
• Secure AI implementation roadmap
• Training team on AI security basics

Methodology: NIST AI Risk Management Framework, AI Act
Focus: Security OF AI + Security FOR AI

---

TBI-007: NIS2
Target: SMEs, Mid-cap (NIS2)
Duration: 12 days
Rated price: € 11,000
State Aid EDIH: € 9.900 (90%)
Customer pays: € 1.100 (10%)

Description:
Assessment compliance Directive NIS2 (EU 2022/2555) with gap analysis and roadmap.

Includes:

• Applicability assessment (Essential vs Important Entity)
• Gap analysis technical and organizational requirements
• Risk assessment critical infrastructure
• supply chain security review
• Incident response capability
• Business review
• Compliance detailed roadmap
• Estimated cost of implementation

Framework: NIS2 Directive, ENISA Guidelines, ISO 27001

---

TBI-008: GDPR SECURITY & COMPLIANCE CHECK
Target: SMEs, Startup (data processing)
Duration: 6 days
Rated price: € 6,500
State Aid EDIH: € 5.850 (90%)
Customer pays: € 650 (10%)

Description:
Security assessment processes personal data processing and GDPR compliance.

Includes:

• Data mapping and data flow analysis
• Technical measures review (encryption, access control, etc.)
• Organizational measures assessment
• Data breach response readiness
• DPIA (Data Protection Impact Assessment) support
• Gap compliance analysis GDPR
• Remediation plan

Regulation: GDPR (EU 2016/679), EDPB Guidelines

---

CLOUD SECURITY ASSESSMENT
Target: SMEs, Startup (infra Cloud)
Duration: 8 days
Rated price: € 8,000,000
State Aid EDIH: € 7.200 (90%)
Customer pays: € 800 (10%)

Description:
Security assessment cloud configuration (AWS, Azure, GCP).

Includes:

• Cloud review
• IAM (Identity & Access Management) review
• Network security assessment (security groups, firewall)
• Storage security (encryption, access policies)
• Compute security (VM, containers)
• Logging and monitoring review
• Compliance check (CIS Benchmarks Cloud)
• Remediation guidance

Tool: ScoutSuite, Prowler, cloud-native tools

---

TBI-010: CONTAINER & KUBERNETES SECURITY ASSESSMENT
Target: Startup, PMI tech-oriented
Duration: 7 days
Rated price: € 8.500
State Aid EDIH: € 7.650 (90%)
Customer pays: € 850 (10%)

Description:
Security assessment containerized infrastructure (Docker, Kubernetes).

Includes:

• Container image security scanning
• Dockerfile security review
• Kubernetes cluster security assessment
• RBAC configuration review
• Network policies assessment
• Secrets management review
• CI/CD pipeline security review
• Security best practices implementation

Tool: Trivy, Anchor, kube-bench

================================================================================

CATEGORIES 2: TRAINING & SKILLS DEVELOPMENT

Training services develop cybersecurity and AI skills in the company,
with technical courses and awareness for different levels of users.

---

TRAIN-001: CYBERSECURITY AWARENESS (Non-tech employees)
Target: SMEs, PA
Mode: Session 4 hours (max 25 participants)
Rated price: € 1.500 per session
State Aid EDIH: € 1.350 (90%)
Customer pays: € 150 per session

Description:
Cybersecurity basic training for non-technical employees.

Content:

• Threat landscape overview
• Phishing recognition and social engineering
• Password security and authentication
• Safe browsing and email security
• Incident reporting procedures
• GDPR awareness basics
• Best practices business devices

Duration: 4 hours (half day)
Materials: Slides, handout, certified

---

TRAIN-002: SECURE DEVELOPMENT FUNDAMENTALS
Target: Development team PMI/Startup
Mode: Course 2 days (max 15 participants)
Rated price per participant: € 1.200
State Aid EDIH: € 1.080 (90%)
Customer pays: € 120 per participant

Description:
Safe practical development course for developer.

Content:

• Secure SDLC principles
• OWASP Top 10 (theory + practice)
• Input validation and encoding output
• Authentication and authorisation
• Cryptography best practices
• Security testing automation (SAST/DAST)
• Secure code review
• Hands-on lab on common vulnerabilities

Duration: 2 days (16 hours total)
Materials: Slides, lab environment, certified

---

TRAIN-003: NIS2 COMPLIANCE FOR MANAGERS
Target: PMI/Mid-cap management
Mode: Session 4 hours (max 20 participants)
Rated price per participant: € 800
State Aid EDIH: € 720 (90%)
Customer pays: € 80 per participant

Description:
Training for management on NIS2 and regulatory obligations.

Content:

• NIS2 Directive overview
• Applicability and classification (Essential/Important)
• Organizational and technical obligations
• Management responsibility
• Incident reporting obligations
• supply chain security
• Health and compliance
• Roadmap implementation

Duration: 4 hours
Materials: Slides, checklist, template

---

TRAIN-004: AI ACT COMPLIANCE & ETHICS
Target: PMI/Startup (AI adopters/developers)
Mode: Session 4 hours (max 20 participants)
Rated price per participant: € 900
State Aid EDIH: € 810 (90%)
Customer pays: € 90 per participant

Description:
Training on AI Act (EU 2024/1689) and ethical development AI.

Content:

• AI Act overview and risk classification
• Prohibited practices
• High-risk AI systems requirements
• Transparency obligations
• GPAI (General Purpose AI) rules
• Conformity assessment
• AI ethics principles
• Practical compliance steps

Duration: 4 hours
Materials: Slides, compliance checklist

---

TRAIN-005: ESSENTIALS DEVSECOPS
Target: Dev & Ops team PMI/Startup
Mode: Course 3 days (max 12 participants)
Rated price per participant: € 1.
State Aid EDIH: € 1.620 (90%)
Customer pays: € 180 per participant

Description:
DevSecOps practical course and security automation.

Content:

• DevSecOps cultures and Shift-Left Security
• CI/CD pipeline security
• SAST/DAST/ SCA automation
• Container security
• Infrastructure as Code security
• Secrets management
• Security monitoring and logging
• Hands-on lab (GitLab CI, Docker, Kubernetes)

Duration: 3 days (24 total hours)
Materials: Slides, lab environment, playbooks, certified

---

TRAIN-006: INCIDENT RESPONSE TABLETOP EXERCISE
Target: IT team PMI/Mid-cap/PA
Mode: Session 6 hours (max 15 participants)
Rated price: € 3,500 per session
State Aid EDIH: € 3.150 (90%)
Customer pays: € 350 per session

Description:
Practical exercise management incident cybersecurity (tabletop exercise).

Content:

• Incident response framework (NIST, SANS)
• Realistic simulated scenario (ransomware, data breach, etc.)
• Role-play team (incident manager, technical, communication, etc.)
• Decision-making under pressure
• Communication stakeholders
• Lessons learned
• Gap analysis incident response

Duration: 6 hours (1 day)
Material: Scenario, role cards, debrief report

================================================================================

CATEGORIES 3: SUPPORT TO FIND INVESTMENTS

Support services in the search for investments in
cybersecurity and digitization.

---

INVEST-001: GRANT APPLICATION SUPPORT
Target: SMEs, Startup
Duration: Variable (5-15 days)
Rated price: € 2.500 base + € 300/day extra
State Aid EDIH: € 2.250 base + € 270/g extra (90%)
Customer pays: € 250 basis + € 30/g extra (10%)

Description:
Support in compiling applications public call for funding
digitalization/cybersecurity.

Includes (basic package 5 days):

• Band analysis and requirements
• Support technical application compilation
• Budget detailed project
• Business plan and financial forecast
• Technical documentation
• Documentation
• (Excluded: pure administrative/legal support)

Output: Full question ready for sending

---

Target: SMEs, Startup
Duration: 8 days
Rated price: € 4.000
State Aid EDIH: € 3.600 (90%)
Customer pays: € 400 (10%)

Description:
Business development plan for cybersecurity investments to be presented to
investor/bank.

Includes:

• Current status assessment
• Security roadmap 3 years
• Detailed investment plan (CAPEX/OPEX)
• ROI calculation and cost-benefit analysis
• Risk mitigation value
• Compliance benefits quantification
• Executive presentation

Output: Full Business Plan + Presentation

---

INVEST-003: INVESTOR PITCH PREPARATION (Startup)
Target: Startup (tech/cyber)
Duration: 5 days
Rated price: € 3.000
State Aid EDIH: € 2.700 (90%)
Customer pays: € 300 (10%)

Description:
Support pitch preparation for investor on security/compliance aspects
(security as competitive advantage).

Includes:

• Security post assessment
• Compliance status summary
• Security-as-differentiator positioning
• Two diligence preparation (security)
• Pitch deck security
• Q&A preparation (security questions)
• Mock pitch session

Output: Pitch deck, Q&A doc, two diligence pack

---

Target: SMEs
Duration: 3 days
Rated price: € 2 000 million
State Aid EDIH: € 1.800 (90%)
Customer pays: € 200 (10%)

Description:
Advisory on options financing cybersecurity investments (public and
private).

Includes:

• Analysis of available public bands (EU, national, regional)
• Financing options private (leasing, credit, etc.)
• Tax benefits and tax incentives
• Eligibility assessment
• Roadmap application
• Referral to financial partners (banks, leasing, etc.)

Output: Report financing options + roadmap

================================================================================

CATEGORIES 4: NETWORKING & ECOSYSTEM

Networking services for connection with ecosystem innovation and other EDIH.

---

NET-001: EDIH NETWORK REFERRAL SERVICE
Target: All
Mode: On-demand
Rated price: € 0 (FREE)
State Aid EDIH: N/A
Customer pays: € 0

Description:
Free referral service to other European Network EDIH for skills
not available in Dognet/MicroCyber.

Includes:

• Customer assessment
• EDIH identification appropriate
• Warm introduction
• Follow-up

---

NET-002: AI INFRASTRUCTURES REFERRAL INNOVATION
Target: All (focus AI adoption)
Mode: On-demand
Rated price: € 0 (FREE)
State Aid EDIH: N/A
Customer pays: € 0

Description:
Free referral service to EU AI infrastructure (AI Factories, AI-on-Demand
Platform, TEFs).

Includes:

• Assessment use case
• Appropriate infrastructure identification
• Support application/onboarding
• Follow-up

---

NET-003: MATCHMAKING EVENTS PARTICIPATION
Target: All
Mode: Periodic events (3-4/year)
Rated price: € 0 (FREE per participant)
State Aid EDIH: Organization costs covered by EDIH
Customer pays: € 0

Description:
Networking events organized by EDIH MicroCyber for matchmaking between SMEs,
startup, investor, tech provider, other EDIH.

Includes:

• Speed networking
• Pitch opportunity
• 1-to-1 meetings
• Thematic workshops

---

NET-004: COLLABORATION BROKERING (EDIH-Certified)
Target: SMEs, Startup
Duration: 3 days
Rated price: € 1.
State Aid EDIH: € 1.350 (90%)
Customer pays: € 150 (10%)

Description:
Structured support in partnership/collaboration with others
ecosystem player.

Includes:

• Collaboration assessment needs
• Partner identification (database EDIH + network)
• Warm introduction and facilitation
• MoU drafting support (templates)
• Follow-up

Output: Partner identified + intro facilitated

================================================================================

SUMMARY PRICING

RANGE PREZZI PER CATEGORIA:

Test Before Invest:

• Entry level (VA base): € 500 cliente
• Mid level (PT web/network): € 1.200-1.400 cliente
• Advanced (mobile, AI, compliance): € 850-1.300 cliente

Training:

• Awareness (4h): € 150/sessione o € 80-150/pax
• Technical training (2-3 giorni): € 120-180/pax
• Specialized (IR, DevSecOps): € 350/sessione o € 180/pax

Support to Find Investments:

• Advisory/consulting: € 200-400 cliente
• Business plan/pitch: € 300-400 cliente

Networking:

• Referral services: GRATUITI
• Matchmaking: GRATUITI
• Collaboration brokering: € 150 cliente

ACCESSIBILITÀ:
Il pricing è progettato per essere accessibile a PMI e startup grazie al co-
finanziamento EDIH (90% copertura). Cliente paga solo 10% prezzo nominale.

CUSTOMIZZAZIONE:
Servizi possono essere customizzati su esigenze specifiche. Quotazioni ad-hoc
per scope diversi da standard.

================================================================================

Cologno al Serio (BG), 29 gennaio 2026

Per Dognet Technologies SRL – EDIH MicroCyber Partner

                                                    Simone Bellometti
                                                    CEO e Legale Rappresentante

================================================================================

NOTE LEGALI:

Aiuti di Stato: Tutti i servizi rispettano limiti GBER o de minimis.
Trasparenza: Lista servizi e prezzi pubblicata online su dognet.tech/edih
Aggiornamenti: Lista può essere aggiornata. Versione corrente sempre su website.
Validità: Dal 01/11/2026 per durata progetto EDIH (36 mesi)

================================================================================