Skip to content
SPECIFICTION
Get listed

NSAuditor AI

nsauditor.com

From $39.17/mo Free plan Open source WindowsmacOSLinuxAPISelf-hosted
Visit nsauditor.com
Spec score 9.2 #2 of 35 in Vulnerability Scanning Software

What it is

NSAuditor AI is an open-core network security audit platform that runs on customer infrastructure across Windows, macOS and Linux. Its agentless scans read configuration and metadata without requiring create, write, modify or delete permissions. The product supports air-gapped environments, offline licensing and zero-data-exfiltration operation. All tiers support AI analysis with OpenAI, Claude or Ollama using customer-provided API keys. Reports can be exported in formats including JSON, HTML, SARIF, CSV and Markdown, depending on edition. Pro adds offline NVD CVE matching and exploit-first prioritization using CISA KEV and FIRST EPSS data from customer-populated stores. Enterprise provides 28 cloud auditors across AWS, GCP and Azure, and maps scans to eight compliance frameworks. Community is free; Pro is listed at $39 a year or $49 a month. Enterprise plans cost $2000.00, $5000.00 or $10,000 a year. Community support is self-serve, while paid tiers add email, onboarding or dedicated support options.

Spec sheet

What it does
NSAuditor AI is an agentless, read-only network security auditing platform that runs on customer infrastructure.Read 15 Oct 2026 · nsauditor.com
Compliance
Enterprise maps one scan to eight frameworks: SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32, and NIST SP 800-171 Rev 2.Read 30 Sep 2026 · nsauditor.com
Support
Pro includes email support with a stated 48-hour SLA, while Enterprise includes a dedicated support channel and onboarding call.Read 15 Oct 2026 · nsauditor.com
Headquarters
Las Vegas, Nevada, USARead 28 Sep 2026 · nsauditor.com
Founded
2004Read 28 Sep 2026 · nsauditor.com
Maker
Nsasoft US LLC says it has provided network security and recovery software for businesses and individuals since 2004.Read 30 Sep 2026 · nsauditor.com
AI integrations
The MCP server works with Claude Desktop, Claude Code, Cursor, and other MCP-compatible AI assistants.Read 30 Sep 2026 · nsauditor.com
AI providers
OpenAI, Claude and Ollama are supported in every tier using customer-supplied keys.Read 15 Oct 2026 · nsauditor.com
Cloud coverage
Enterprise provides 28 cloud auditors across AWS, GCP, and Azure, plus a zero-trust posture check scored from a network-host scan.Read 30 Sep 2026 · nsauditor.com
Cloud integrations
Enterprise provides read-only auditors for AWS, Azure and GCP and optional Vanta, Drata and Secureframe connectors.Read 15 Oct 2026 · nsauditor.com
Company founded
LinkedIn lists the company as founded in 2011.Read 15 Oct 2026 · linkedin.com
Company headquarters
LinkedIn lists headquarters in Las Vegas, Nevada, with a primary address of 732 S 6th St.Read 15 Oct 2026 · linkedin.com
Company type
LinkedIn lists NSAuditor.ai as privately held in computer and network security with 11–50 employees.Read 15 Oct 2026 · linkedin.com
Compliance frameworks
Enterprise maps one scan to SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO 27001:2022, CIS Controls v8, GDPR Article 32 and NIST SP 800-171 Rev 2.Read 15 Oct 2026 · nsauditor.com
Continuous monitoring
CTEM watch mode rescans on a schedule, compares history and can send webhook alerts; Enterprise retains unlimited JSONL history.Read 15 Oct 2026 · nsauditor.com
Data handling
The vendor states that scans, findings and reports stay on the customer machine and that license validation is offline.Read 15 Oct 2026 · nsauditor.com
Documentation depth
The documentation covers installation, architecture, typed plugin SDK, compliance evidence, MCP workflows and air-gapped deployment.Read 15 Oct 2026 · nsauditor.com
Evidence integrity
Enterprise evidence packs use SHA-256 chain-of-custody manifests, optional RFC 3161 timestamps and operator-held Ed25519 signatures verifiable offline.Read 15 Oct 2026 · nsauditor.com
Exports
Community exports JSON, HTML, SARIF and CSV, while Pro adds executive HTML and Jira-importer CSV reports.Read 15 Oct 2026 · nsauditor.com
GRC integrations
Enterprise includes opt-in scan-time connectors for Vanta, Drata, and Secureframe; production live-tenant validation is still in progress.Read 30 Sep 2026 · nsauditor.com
Independent review: product scope
SC Media described the earlier Nsauditor as a Windows multipurpose scanner covering ports, SQL, web servers, NetBIOS, SNMP, RPC and reporting.Read 15 Oct 2026 · scworld.com
Installation
The documented installation command is npm install -g nsauditor-ai, with deployment also described for isolated hosts and container/orchestrator environments.Read 15 Oct 2026 · nsauditor.com
Licence
The Community Edition repository is MIT licensed; Pro and Enterprise features use a separate proprietary licence.Read 15 Oct 2026 · github.com
Limit: comparison with open-source tools
SC Media said users experienced with nmap and Nessus might find some Nsauditor options restrictive.Read 15 Oct 2026 · scworld.com
Limit: interface organization
SC Media said the large number of utilities could make the interface feel cluttered and disorganized.Read 15 Oct 2026 · scworld.com
Limit: reporting depth
SC Media characterized the reporting output as fairly basic, although it was XML and could be restyled.Read 15 Oct 2026 · scworld.com
MCP integration
The product includes an MCP server for AI assistants; Community exposes three of seven tools, Pro five, and Enterprise the enterprise tool set.Read 15 Oct 2026 · nsauditor.com
MITRE mapping
Findings are mapped to MITRE ATT&CK techniques with kill-chain context.Read 15 Oct 2026 · nsauditor.com
Notable news
The official homepage states Enterprise 2.0.0 and Community 1.0.0 were published on 2026-10-15, adding Node.js 24 support and drift notifications.Read 15 Oct 2026 · nsauditor.com
Offline limitation
Offline CVE matching requires NSAUDITOR_OFFLINE_ONLY=1 and a local NVD store; the default scan attempts to reach NVD.Read 15 Oct 2026 · nsauditor.com
Permissions
Auditing reads configuration and metadata only and does not require create, write, modify, or delete permissions.Read 30 Sep 2026 · nsauditor.com
Platform support
The documentation states that NSAuditor AI works on macOS, Linux, and Windows.Read 30 Sep 2026 · nsauditor.com
Plugin extensibility
The GitHub README describes auto-discovered plugins and loading external npm plugin packages through NSAUDITOR_PLUGIN_PATH.Read 15 Oct 2026 · github.com
Praise: unified toolkit
SC Media praised the broad collection of network-audit tools combined under one interface and found the local network monitor particularly useful.Read 15 Oct 2026 · scworld.com
Product type
NSAuditor AI is an open-core, AI-powered network security audit platform that runs agentless, read-only, and entirely on the customer’s infrastructure.Read 30 Sep 2026 · nsauditor.com
Public API/SDK
The repository exposes an MCP server and a plugin interface for custom scanners; no separate REST API or SDK is described on the opened pages.Read 15 Oct 2026 · github.com
Repository activity
The public GitHub repository showed 20 stars, 6 forks and 567 commits when opened.Read 15 Oct 2026 · github.com
Risk prioritization
Findings receive a composite risk score using severity, exploitability, impact and exposure, with suppression workflows for accepted risk and false positives.Read 15 Oct 2026 · nsauditor.com
Scanner coverage
The current product advertises 56 plugins covering networks plus AWS, Azure and GCP.Read 15 Oct 2026 · nsauditor.com
Scanning output
Reports can be exported as JSON, HTML, SARIF, CSV, Markdown, executive HTML, or Jira-importer CSV depending on edition.Read 30 Sep 2026 · nsauditor.com
Security model
The product supports zero-data-exfiltration operation, air-gapped environments, offline licensing, and read-only credentials.Read 30 Sep 2026 · nsauditor.com
System requirements
The documented runtime requirement is Node.js 20 or newer for the Enterprise technical specification.Read 15 Oct 2026 · nsauditor.com
Threat intelligence
Pro adds offline NVD CVE matching and exploit-first prioritization using CISA KEV and FIRST EPSS data from customer-populated stores.Read 30 Sep 2026 · nsauditor.com

Plans and prices

Community Free forever 27 scanner plugins · AI analysis · JSON/HTML/SARIF/CSV · MCP server (3 of 7 tools) · 7-day CTEM history · webhook alerts Read 15 Oct 2026 · nsauditor.com
Pro (monthly) $49 a month Billed each month Same features as annual Pro · CVE matching · risk scoring · parallel analysis agents Read 30 Sep 2026 · nsauditor.com
Pro monthly $49 a month billed each month CVE matching · MITRE annotations · risk scoring · exploit intelligence · executive HTML/Jira CSV reports · unlimited CTEM history · 5 MCP tools · 48-hour email SLA Read 15 Oct 2026 · nsauditor.com
Pro (annual) $470 a year Billed as $470/yr · saves $118 vs monthly CVE matching · 4 parallel analysis agents · risk scoring · 48hr email-support SLA Read 30 Sep 2026 · nsauditor.com
Pro annual $470 a year annual payment; $39.17/month effective Same Pro features as monthly · annual savings stated as $118 Read 15 Oct 2026 · nsauditor.com
Enterprise Base $2,000 a year annual invoicing Up to 5 seats/scanning nodes · 56 plugins · eight compliance frameworks · air-gapped operation Read 15 Oct 2026 · nsauditor.com
Enterprise Growth $5,000 a year annual invoicing Up to 25 seats/scanning nodes · 56 plugins · eight compliance frameworks · air-gapped operation Read 15 Oct 2026 · nsauditor.com
Enterprise Scale $10,000 a year annual invoicing Unlimited seats · custom SLA · custom plugins · 56 plugins · eight compliance frameworks Read 15 Oct 2026 · nsauditor.com

Every NSAuditor AI plan and price →

Strong points and limits

Strong points

  • Agentless scans read configuration and metadata only
  • Supports air-gapped environments and offline licensing
  • All tiers support customer-keyed AI analysis
  • Enterprise maps scans to eight frameworks

Limits

  • Pro annual price is $39 a year
  • Enterprise plans cost $2,000 a year or more
  • GRC connector production live-tenant validation is in progress

Who it suits

It suits organizations that want network audits on their own infrastructure, including teams with read-only or air-gapped requirements. Pro and Enterprise add threat matching, cloud audits and compliance mapping for teams that need those capabilities.

Verdict

NSAuditor AI emphasizes customer-controlled, read-only auditing, with cloud and compliance capabilities reserved for Enterprise. Community is free; Pro and Enterprise provide additional features and support at listed annual or monthly prices.

Where Specifiction places it

Alternatives to NSAuditor AIAll alternatives →