NSAuditor AI
nsasoft.us
What it is
NSAuditor AI is an open-source network security scanner that runs on a customer’s infrastructure and can be configured to operate fully offline. It scans network hosts and CIDR subnets, AWS, Azure, GCP, TLS, DNS, and operational technology targets; authenticated and continuous scanning are supported. Community includes 27 scanner plugins, parallel subnet scanning, webhook alerts, and exports in JSON, HTML, SARIF, and CSV. AI analysis is available in every tier through OpenAI, Claude, or Ollama with customer-provided API keys. Pro adds offline-first NVD CVE matching and risk scoring. Enterprise adds cloud auditors and evidence packs for listed frameworks including SOC 2, HIPAA, PCI DSS v4.0.1, and ISO/IEC 27001:2022. The maker says scan data, findings, and reports remain on the customer’s machine, and license checks can work offline. Community costs nothing; Pro costs $39 a year or $49 a month. Enterprise plans cost $2,000 a year, $5,000 a year, or $10,000 a year. It supports Windows, macOS, and Linux.
Spec sheet
- Product
- NSAuditor AI is an open-source AI-powered network security scanner that runs on the customer’s infrastructure.Read 7 Oct 2026 · nsasoft.us
- Intended users
- The maker says the product is used by MSPs, MSSPs, compliance consultancies, and mid-market teams in healthcare, finance, government, and critical infrastructure.Read 7 Oct 2026 · nsasoft.us
- Security
- The maker says scan data, findings, and reports stay on the customer’s machine, and license validation works offline using a JWT.Read 7 Oct 2026 · nsauditor.com
- Compliance
- Enterprise produces evidence packs for SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32, and NIST SP 800-171 Rev 2.Read 7 Oct 2026 · nsauditor.com
- Support
- Pro includes email support with a 48-hour SLA; Enterprise includes a dedicated support channel and an onboarding call.Read 7 Oct 2026 · nsauditor.com
- Headquarters
- Las Vegas, Nevada, United StatesRead 28 Sep 2026 · nsasoft.us
- Founded
- 2004Read 28 Sep 2026 · nsasoft.us
- AI providers
- All tiers support AI analysis through OpenAI, Claude, or Ollama using customer-provided API keys.Read 7 Oct 2026 · nsauditor.com
- Cloud auditing
- Enterprise includes cloud auditors for AWS, GCP, and Azure.Read 7 Oct 2026 · nsauditor.com
- CVE intelligence
- Pro adds offline-first NVD CVE matching and exploit-first triage using CISA KEV and FIRST EPSS data stores populated by the customer.Read 7 Oct 2026 · nsauditor.com
- Exports
- Community exports JSON, HTML, SARIF, and CSV; Pro adds an executive HTML report and Jira-importer CSV.Read 7 Oct 2026 · nsauditor.com
- GRC integrations
- Enterprise offers opt-in connectors for Vanta, Drata, and Secureframe; the maker says live validation against production tenants is in progress and advises treating production use as early-access until validation completes.Read 7 Oct 2026 · nsauditor.com
- Limits
- Enterprise’s HIPAA evidence coverage is not a BAA, and its NIST SP 800-171 Rev 2 evidence is described as preparation support rather than a certification.Read 7 Oct 2026 · nsauditor.com
- Offline operation
- The maker states the scanner can run fully offline when configured, with Ollama-based AI analysis requiring no internet connection.Read 7 Oct 2026 · nsauditor.com
- Other integrations
- The product can run as an MCP server for MCP-aware clients, and Community includes webhook alerts.Read 7 Oct 2026 · nsauditor.com
- Scanning
- Community includes 27 scanner plugins, parallel subnet scanning, and a SYN scanner described as an Nmap wrapper.Read 7 Oct 2026 · nsauditor.com
Plans and prices
Strong points and limits
Strong points
- Community includes 27 plugins and several export formats.
- Supports authenticated and continuous scanning.
- Can be configured for fully offline operation.
- Community is free.
Limits
- AI analysis requires customer-provided API keys.
- Enterprise HIPAA evidence coverage is not a BAA.
- NIST SP 800-171 evidence is preparation support, not certification.
- GRC connector production validation is still in progress.
Who it suits
The product is aimed at MSPs, MSSPs, compliance consultancies, and mid-market teams in sectors including healthcare, finance, government, and critical infrastructure. It suits organizations that need an on-premises scanner and can configure the infrastructure and data stores it depends on.
Verdict
NSAuditor AI combines on-premises scanning with offline operation and tiered compliance features. Enterprise buyers should account for the stated limits on HIPAA and NIST evidence and the early-access status of GRC connectors.
Where Specifiction places it
- Vulnerability Scanning Software#5 of 358.5
- Network Vulnerability Scanners#4 of 238.6