AI-Powered Network Security Audits Without Data Exposure.
NSAuditor AI is an open-core, AI-powered network security audit platform that runs agentless, read-only, and entirely on your infrastructure. Nothing is installed across your estate, credentials are read-only by design, and your security data never leaves your environment.
With 55 plugins for networks and AWS, Azure, and GCP, one scan delivers risk-scored security findings, exploit-first prioritization using CISA KEV and FIRST EPSS, MITRE ATT&CK mapping, and auditor-ready evidence mapped to 7 compliance frameworks: SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, and GDPR Article 32.
Evidence packs include SHA-256 chain-of-custody manifests and opt-in RFC 3161 trusted timestamps. Operator-held Ed25519 signatures can be verified offline. NSAuditor AI supports air-gapped environments and reports evidence gaps explicitly—never claiming an unassessed surface is secure.
One scan. Technical security assessment. Seven compliance frameworks. Verifiable evidence. Zero data exfiltration.
An open-core scanner with risk-scored findings, threat intelligence, and octa-framework compliance evidence — SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Critical Security Controls v8, GDPR Article 32, and NIST SP 800-171 Rev 2 — built so your audit trail holds up to a CPA-firm review, a QSA RoC walkthrough, an ISO Stage 2 assessment, a CIS-CAT self-attestation, and a GDPR Article 32 review.
Risk-Scored Prioritization
Every finding carries a composite risk score — severity × exploitability × impact × exposure — so the queue sorts worst-first, and an operator suppression workflow tracks accepted-risk and false-positive dispositions with expiry.
Findings are mapped to MITRE ATT&CK techniques with kill-chain context, so you can show your CISO what an attacker would actually do — not just CVE noise.
A network security audit is a systematic review of your network — hosts, ports, services, configurations, and cloud accounts — to find vulnerabilities, misconfigurations, and compliance gaps before an attacker does.
NSAuditor AI runs that audit locally: it discovers live hosts and services, fingerprints them with safe, non-destructive probes, matches those versions against CVE data offline, maps each finding to MITRE ATT&CK, and generates auditor-ready evidence for seven frameworks — SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, and GDPR Article 32 — from a single scan. Unlike SaaS scanners, every step runs on your own infrastructure, so a complete network security audit happens with zero data exfiltration.
Need cloud coverage? NSAuditor AI Enterprise extends the audit across AWS, GCP, and Azure with the full octa-framework compliance engine, air-gapped operation, and continuous monitoring (CTEM).
Start with the MIT-licensed Community Edition. Upgrade only when you need CVE matching and risk-scored prioritization, compliance evidence, or cloud scanners.
EE 0.40.1 — NIST SP 800-171 Rev 2 joins as the eighth compliance framework
Enterprise Edition 0.40.1, published 21 August 2026 alongside Community Edition 0.2.45 and the agent-skill package 0.2.43 — the 98th consecutive trio. NIST SP 800-171 Rev 2 is the eighth compliance framework, and it routes from the same single agentless, read-only scan as SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8 and GDPR Article 32. It is scoped as evidence substrate for CMMC Level 2 preparation.
Mapped at the level an assessment is actually scored at. SP 800-171A decomposes every requirement into determination statements, and a C3PAO scores each one. Every mapped requirement here carries the full list of its determination statements alongside the 81 of 172 this engine supplies examine-method material for, across the 51 mapped requirements — and where a requirement is partial, the output names which of three shortfalls it is. An assessor gets the shape of the evidence, not a label.
All 110 requirements are enumerated, with no declared subset — every requirement is classified and every out-of-scope group carries its reason. Rev 2 is pinned deliberately, because CMMC assesses Rev 2 by rule. The engine informs your System Security Plan and POA&M and leaves the determination where it belongs, with your assessor. Plugin catalog unchanged at 28 Enterprise auditors, 55 overall; the seven existing coverage matrices are unchanged. The Community Edition floor is raised to 0.2.45 or newer, because framework-name validation lives in Community Edition. Read the NIST SP 800-171 Rev 2 coverage page →
Full release history: the Enterprise page and the package changelogs on npm.