
Kertos.io
Vanta
Drata
ISMS.online
Sprinto
Klaro Comply
Effivity ISMS software
Swiss-hosted ISMS software for SMEs and public bodies: ISO/IEC 27001, NIS2, NIST CSF, FADP and more – risks, SoA, policies, incidents and audit readiness in one place.

Deno
Full-stack Javascript Components for one-dev armies

Which is more popular?
Website, pricing, platforms and company facts side by side.
|
|
|
|
|---|---|---|
| Website | varmo.ch | nullstack.app |
| Pricing | ||
| Company | Startup from Switzerland · 1 - 9 employees | — |
| Listed in |
In their own words, as submitted to SaaSHub.


Varmo is an information security management system (ISMS) built for small and mid-sized organisations and public administrations in Switzerland and Europe. It guides you from an empty account to an audit-ready ISMS: a setup assistant with 22 steps, then risks, measures, assets, protection...
No description of Nullstack yet.
What each product offers, as listed by its team.


Possible disadvantages
Walkthroughs and reviews on video.
No Varmo.ch videos yet. You could help us improve this page by suggesting one.
Full-stack with Nullstack - Part 3
More videos
How often each product is chosen within a category, 0–100% relative to the other.


As answered by people managing Varmo.ch and Nullstack.
Varmo.ch's answer
Transparent prices from EUR 159 per month, a 30-day trial with every feature and no credit card. Everything is built around ISO/IEC 27001 evidence (SoA, treatment plan, readiness report), and strict four-eyes approval is enforced. The interface is available in German and English.
Varmo.ch's answer
Varmo combines international frameworks with Swiss requirements such as FADP, the ICT Minimum Standard and FINMA, and hosts all data in Switzerland. Every page says what happens next and who is responsible, so small teams can run an ISMS without a consultant.
Varmo.ch's answer
Information security officers, IT managers and data protection officers in SMEs, municipalities and other public bodies in Switzerland and the EU, especially organisations preparing for ISO/IEC 27001 or facing NIS2 obligations.
Varmo.ch's answer
Next.js and React (TypeScript), PostgreSQL via self-hosted Supabase, Keycloak for sign-in and SSO, BunkerWeb web application firewall, ClamAV malware scanning, Docker.
Share your experience with using Varmo.ch and Nullstack. For example, how are they different and which one is better?
When comparing Varmo.ch and Nullstack, you can also consider the following products.

Kertos is the AI-powered European Compliance Automation Platform that automates your compliance standards, such as ISO 27001, NIS2, GDPR, SOC 2, or the EU AI Act. Your quick way to certifications and bigger deals.
Compare Kertos.io to Varmo.ch or Nullstack:

A secure runtime for JavaScript and TypeScript built with V8, Rust, and Tokio.
Compare Deno to Varmo.ch or Nullstack:



Trust ISMS.online To Give Your Security Credentials a Boost. Our Cloud Software Can Help You Achieve ISO 27001, GDPR & More. Request a Demo
Compare ISMS.online to Varmo.ch or Nullstack:

The world’s first Autonomous Trust Platform that detects posture changes, identifies what’s at risk, and takes action across compliance, vendor risk, AI governance, and more.
Compare Sprinto to Varmo.ch or Nullstack: