🇫🇷 FR

Routing security audit: the report your auditor is asking for

A senior network engineer reviews your AS's routing in depth: RPKI, ROAs, BGP visibility, IRR route objects, prefix-hijack exposure. You get a clear report your team and your security auditor can actually use.

One-shot, no subscription. Fully remote and non-intrusive: public data only (RIS, RPKI, IRR), no access to your network required.

Three packages, one actionable deliverable

Prices excl. VAT. Pay online or by invoice (wire transfer). Performed by the engineer who built Sentinelle Routage.

Flash Audit
€490 excl. VAT · 1 ASN
Delivered within 5 business days
  • Full review of 1 ASN: RIS visibility, RPKI validation of 100% of announced prefixes (v4+v6), BGP neighbours
  • Detection of overly permissive ROAs (maxLength, RFC 9319) and hijack exposure
  • PDF report (5-8 pages): score, detailed findings, top 5 actions
Order — pay online
Full Audit
€1,490 excl. VAT · 1 ASN
Delivered within 10 business days
  • Everything in Flash, plus: incident history (hijacks, leaks), IRR route-object review, PeeringDB consistency
  • Filtering recommendations (prefix-lists, RPKI ROV) and a prioritised remediation plan
  • MANRS-readiness gap analysis (the 4 actions)
  • 1-hour video debrief with your network team
Request a quote by email
NIS2 Readiness Pack
€2,990 excl. VAT · up to 3 ASNs
Schedule agreed together (~2 weeks)
  • Everything in the Full Audit, multi-ASN (up to 3)
  • "Evidence of diligence" file formatted for your CISO or auditor: mapping to the relevant NIS2 Article 21 requirements
  • Routing-incident response procedure, ready to drop into your processes
  • 3 months of Sentinelle Pro monitoring included (24/7 alerts + monthly reports)
Request a quote by email

📄 See a sample report (PDF, 6 pages) — fictional network (RFC 5398/5737 resources), same structure as the reports we deliver.

Why audit your routing now?

NIS2 asks for evidence, not intentions. The NIS2 directive and implementing regulation 2024/2690 require essential and important entities in the digital-infrastructure sector to run documented risk-management measures. Prefix hijacks and expired ROAs are a very real risk (MyEtherWallet 2018, Verizon 2019, Celer 2022), and a dated, signed routing assessment is exactly the kind of artefact an auditor files. We say NIS2 readiness deliberately: the audit doesn't replace your compliance programme, it supplies its routing chapter — the one generalist security firms don't cover.

Non-intrusive by design. The audit relies exclusively on public sources: RIPE NCC RIS collectors, RPKI validation (local Routinator instance), IRR route objects (RADB), the RIPE database. Nothing to install, no access to your routers or IT systems, no clearance process on your side. You can order the audit without opening an access request with your IT department.

How it works

1Order

Pay online (Flash Audit) or quote + invoice (Full, NIS2 Pack). Just tell us your AS number(s).

2Analysis

100% of your announced prefixes reviewed: RPKI, ROAs, maxLength, IRR, visibility, BGP neighbourhood, history depending on the package.

3Report

A dated, argued PDF: score, findings, prioritised action plan. Within 5 business days for Flash, 10 for Full.

4Afterwards

Video debrief (Full and Pack). If you want it to stay clean: continuous monitoring takes over.

Frequently asked questions


Who performs the audit?

The network engineer who built Sentinelle Routage: 18 years on critical networks, MPLS backbone (Juniper, Cisco, Nokia). The public checker has already analysed 450+ ASNs, and the methodology was covered in a blog post by Stéphane Bortzmeyer (AFNIC).

Is this a NIS2 compliance audit?

No — and be wary of anyone selling you one while national transpositions are still settling. This is a technical audit of the routing chapter, formatted to feed your NIS2 readiness file (with an Article 21 mapping in the Pack). It complements an organisational audit; it doesn't replace it.

Do you need access to our network?

No. Everything is done from public data (RIS, RPKI, IRR, RIPE DB). That's what makes the audit fast and risk-free for you: nothing to install, nothing to open up.

What if our routing is already clean?

Great: the report documents it in black and white, with a date and a method. That's precisely what an auditor or an enterprise customer will ask you to prove. And if we find blind spots (permissive ROAs, prefixes without IRR objects, partial visibility), you leave with the plan to fix them.

How does invoicing work?

N&R Consulting (French company) issues a proper invoice for every order, online payments included. Prices are excl. VAT. For the Full Audit and NIS2 Pack: quote within 48 h, work starts at signature.

Not sure which package fits?
Describe your situation in two lines (ASN, audit deadline, team size) and you'll get an engineer's answer, not a sales funnel.

Email the engineer Check my ASN for free first