Pro Edition — For Security Professionals

Stop chasing
false positives.

CVE matching, MITRE ATT&CK mapping, and safe verification probes that confirm findings are real before they hit your report. Client-ready PDFs included.

Annual Monthly Save 20%
$39/mo
Billed as $470/yr · saves $118 vs monthly
Subscribe Annual — $470/yr →
Cancel anytime · Compare all plans · Need Enterprise?

Findings confirmed by probe, not assumption

Version-based CVE matching is just the start. Every finding goes through safe, non-destructive probes that attempt to confirm the vulnerability is actually present and exploitable. Results are classified — no guessing, no inflated reports.

Rate-limited (2s between probes per host), no exploit payloads, no data writes. Every probe is audit-logged. Configurable per scan.

VERIFIED
Probe confirmed
POTENTIAL
Version match only
FALSE_POS
Probe disproved
Finding: TLS 1.0 on port 443
→ Probe: attempt TLSv1.0 handshake
→ Handshake succeeds
→ VERIFIED ✓
Finding: Default SNMP community 'public'
→ Probe: SNMP GET sysDescr with 'public'
→ Response received
→ VERIFIED ✓
Finding: Anonymous FTP enabled
→ Probe: login as anonymous
→ Connection refused
→ FALSE_POSITIVE — removed from report
Finding: CVE-2024-XXXX (version match)
→ Probe: service-specific safe probe
→ Timeout (firewall filtered)
→ POTENTIAL — flagged, not confirmed
🔎

Offline CVE Matching

Auto-generated CPEs from detected services matched against the NVD feed — offline, no API calls. Know which CVEs affect each host before writing a single line of your report.

🗺️

Full MITRE ATT&CK Mapping

Every finding maps to ATT&CK techniques with kill-chain association. Compliance teams love it. Clients understand it. Takes zero extra effort on your part.

🤖

Parallel Analysis Agents

Five specialized agents run concurrently — Auth, Crypto, Config, Service, and Exposure. Each produces structured findings for its category, then feeds the risk engine.

📊

Risk Scoring

Composite scoring: severity × exploitability × impact × exposure. Verification-aware — VERIFIED findings score 1.0×, POTENTIAL scores 0.6×. Prioritized, sortable output.

📄

Branded PDF Reports

Custom logo, company name, header text. VERIFIED vs POTENTIAL clearly labeled. Client-ready output — executive summary and technical findings in one document.

🧠

Intelligence-Enriched AI

Same OpenAI / Claude / Ollama providers you use in CE — but Pro injects CVE matches, MITRE techniques, risk scores, and verification status into every prompt. Vastly better output.

🔁

Advanced CTEM

Unlimited scan history in SQLite. CVE-level delta detection — new vulnerabilities since last scan, not just host diffs. Risk trend analysis (improving / degrading / stable).

🔏

Enhanced Redaction

Configurable profiles (strict / moderate / minimal), additional patterns for AWS keys, DB connection strings, and JWTs. Full redaction audit log for compliance.

🔌

Pro MCP Tools

Four additional tools for AI assistant integration: get_vulnerabilities, risk_summary, scan_compare, save_finding.

🔑
Auth
Weak auth, default credentials, anonymous access, missing auth on admin panels
🔐
Crypto
TLS < 1.2, weak ciphers, expired or self-signed certs, missing HSTS
⚙️
Config
Default SNMP communities, debug modes, directory listing, exposed .env files
🛠️
Service
CVE-specific vulnerabilities, end-of-life software, backport detection
🌐
Exposure
Internet-facing services, lateral movement paths, unnecessary open ports

Agents run via Promise.allSettled — if one category has no relevant services, it's skipped. Results feed the risk engine.

Feature
Pro
Community
AI analysis (OpenAI, Claude, Ollama)
Prompt content
CVEs + MITRE + risk scores + verification
basic summary
CVE matching (offline NVD)
MITRE ATT&CK mapping
Full kill-chain
basic tagging
Vulnerability verification (probes)
Risk scoring
Parallel analysis agents
5 agents
PDF export
Branded reports (custom logo)
CTEM scan history
Unlimited (SQLite)
7 days
MCP tools
9 total
5 CE tools
Email support
48hr SLA
get_vulnerabilities
Pull the full finding list from the latest scan — with CVE IDs, risk scores, and verification status — directly into your AI assistant.
risk_summary
Get a prioritized risk overview ranked by composite score. Ask Claude or GPT-4 to draft remediation plans from it.
scan_compare
CVE-level delta between two scans. New vulnerabilities introduced, old ones resolved. Perfect for change-window reporting.
save_finding
Schema-validated finding persistence. Have your AI assistant flag findings for follow-up and write them directly to the finding queue.

Start the MCP server with nsauditor-ai-mcp — works with Claude Desktop, Cursor, and any MCP-compatible AI assistant.

1 · Authenticate with npm (token included in your purchase email)
# @nsasoft/nsauditor-ai-ee is a private (restricted) package.
# Use the npm read-token delivered with your license email.
npm config set //registry.npmjs.org/:_authToken npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# Or, project-scoped, in an .npmrc file
echo "//registry.npmjs.org/:_authToken=npm_xxxx..." >> ~/.npmrc
2 · Install (requires nsauditor-ai v0.1.24+ and Node 20+)
# Install the CE platform (if not already)
npm install -g nsauditor-ai

# Add the Pro package
npm install -g @nsasoft/nsauditor-ai-ee
3 · Activate your license key
export NSAUDITOR_LICENSE_KEY=pro_eyJhbGciOiJFUzI1NiIs...

# Verify it's working
nsauditor-ai license --status
 Pro license active | Org: you@example.com | Expires: 2027-04-29
4 · Scan with intelligence
nsauditor-ai scan --host 192.168.1.0/24 --plugins all

# View your AI report in browser
open out/192.168.1.0_*/scan_response_ai.html     # macOS
xdg-open out/192.168.1.0_*/scan_response_ai.html  # Linux

# Executive scan with branded PDF
nsauditor-ai scan --host 10.0.0.0/24 --plugins all \
  --report-mode executive --report-brand ./my-logo.png

Ready to upgrade?

Subscribe directly to unlock the verification engine, CVE matching, MITRE mapping, parallel analysis agents, and branded reports. Cancel anytime — reverts to Community Edition with no data lost.

Monthly option: $49/mo · Compare all plans