Regula
Regula is a self-driving NIS2 compliance audit on Claude Opus 4.7.
Core trick
Interview answers feed a multi-agent pipeline that scores gaps against NIS2 Article 21(2) controls and renders remediation PDFs.
Description
Regula is a self-driving NIS2 compliance audit on Claude Opus 4.7. A 9-agent pipeline (two Managed Agents + Extended Thinking) runs a plain-language interview, simulates a Red Team audit, and ships 5 remediation-ready PDFs in 15 minutes. Article 21(2) mandates the exact ten cybersecurity controls that stop real attacks — Regula identifies your gaps for ~160,000 EU companies in direct scope plus a much larger supply-chain tail. Compliance is the legal frame; cybersecurity uplift is the actual outcome.
README excerpt
# Regula > **Self-driving NIS2 compliance audit on Claude Opus 4.7.** > 15 minutes. 13 tool calls. 5 remediation-ready PDFs. > **Cybersecurity uplift with legal backing.** [](https://www.anthropic.com/) [](https://www.python.org/) [](LICENSE) [](https://cerebralvalley.ai/) 🌐 **Live** → [regula.digital](https://regula.digital) 💻 **Repo** → [github.com/posgame3/regula](https://github.com/posgame3/regula) 📁 **Built for** Cerebral Valley · *Built with Opus 4.7* Hackathon · 2026 --- ## The problem NIS2 didn't appear out of nowhere. It's the EU's response to a brutal escalation in cyberattacks against the very companies it now regulates: - **Ransomware operators have systematically targeted EU healthcare** through 2023–2024, encrypting patient records and forcing hospitals offline for weeks - **Supply-chain attacks** (MOVEit-class, Log4j-class) repeatedly use small SaaS vendors as the entry point into critical infrastructure - **Phishing and credential theft** remain the #1 initial access vector — exploiting the absence of MFA and security training in SMEs - **Backup-related ransomware recovery failures** have driven multiple EU-region SMEs out of business in the past 18 months The European C