Skip to content
SPECIFICTION
Get listed

Vornin

vornin.com

From €99/mo Free plan WebAPI

What it is

Vornin is cloud vulnerability-management software combining scanning, risk prioritisation, remediation tracking, and compliance evidence in one finding record. It scans attack surfaces, web applications, APIs, networks, code, containers, Kubernetes, and cloud environments. Findings retain ownership, SLA details, discussion, scan evidence, and verification history across scans. Its deterministic score weighs severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age. Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53. Imports include Nessus, OpenVAS, CSV, and JSON; paid plans add SARIF, SBOM, and CSV exports. Integrations include major clouds, Kubernetes, code platforms, collaboration tools, Jira, and Discord. Vornin says data is stored in the EU, fields use AES-256-GCM at rest, and connections use TLS 1.2 or higher. A 14-day Business trial requires no card, then moves to Free unless upgraded.

Spec sheet

Product
Vornin combines vulnerability scanning, risk-based prioritisation, remediation tracking, and technical compliance evidence in one finding record.Read 7 Oct 2026 · vornin.com
Intended users
The Team plan is described for solo IT and small teams, Business for organisations preparing for NIS2, DORA, or ISO 27001 audits, and Scale for large international organisations with multi-cloud estates or regulated audits.Read 7 Oct 2026 · vornin.com
Trial
The free trial provides 14 days of Business-tier access without a credit card; after it ends, the workspace moves to Free unless upgraded.Read 7 Oct 2026 · vornin.com
Integrations
The pricing page lists AWS, Azure, Google Cloud, Kubernetes, GitHub, GitLab, Azure DevOps, Slack, Teams, Jira, and Discord integrations, with availability varying by plan.Read 7 Oct 2026 · vornin.com
Compliance
Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53.Read 7 Oct 2026 · vornin.com
Headquarters
Copenhagen, DenmarkRead 23 Sep 2026 · vornin.com
Data security
Vornin states that sensitive fields are encrypted at rest with AES-256-GCM and connections use TLS 1.2 or higher.Read 7 Oct 2026 · vornin.com
Evidence integrity
Finding events use a per-tenant SHA-256 hash chain, and Vornin says changing an event invalidates later events in the chain.Read 7 Oct 2026 · vornin.com
Finding workflow
Findings retain ownership, SLA, discussion, scan evidence, and verification history across scans.Read 7 Oct 2026 · vornin.com
Hosting and jurisdiction
Vornin says it is a Danish ApS and stores vulnerability data, findings, and audit evidence in the EU under EU law.Read 7 Oct 2026 · vornin.com
Imports and exports
Vornin can import Nessus, OpenVAS, CSV, and JSON results; paid plans include SARIF, SBOM, and CSV exports.Read 7 Oct 2026 · vornin.com
Prioritisation
Its deterministic prioritisation score considers severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age.Read 7 Oct 2026 · vornin.com
Scan coverage
It scans attack surfaces, web apps, APIs, networks, code, containers, Kubernetes, and cloud environments.Read 7 Oct 2026 · vornin.com
Source code handling
Code scanning uses read-only access, removes the working checkout after scanning, and retains selected redacted excerpts as finding evidence under the plan’s retention policy.Read 7 Oct 2026 · vornin.com
Support and contact
Vornin lists [email protected] for pricing questions and [email protected] for vulnerability disclosures, and says it responds to every security report within 48 hours.Read 7 Oct 2026 · vornin.com

Plans and prices

Free Free forever 3 targets · web and network scanning · 1 compliance framework preview · manual scans Read 7 Oct 2026 · vornin.com
Team €99 a month monthly 5 targets included · 5 scheduled scans · unlimited users · all 9 frameworks · REST API access Read 7 Oct 2026 · vornin.com
Business €239 a month monthly 5 targets included · 15 scheduled scans · SAML SSO + SCIM · audit evidence packs Read 7 Oct 2026 · vornin.com
Scale €559 a month monthly 5 targets included · unlimited scheduled scans · CI/CD build gates · white-label reports Read 7 Oct 2026 · vornin.com

Every Vornin plan and price →

Strong points and limits

Strong points

  • Scans code, containers, Kubernetes, clouds, and networks
  • Deterministic prioritisation includes exploit and compliance factors
  • Nine compliance frameworks are mapped
  • EU data storage and encrypted sensitive fields
  • Fourteen-day Business trial without credit card

Limits

  • Free plan is limited to three targets
  • Free plan provides manual scans only
  • Paid exports include formats unavailable on Free
  • Integration availability varies by plan

Who it suits

Vornin suits solo IT teams, organizations preparing for regulated audits, and large multi-cloud estates, matching its Team, Business, and Scale descriptions. It is useful where scanning, remediation ownership, and compliance evidence need to stay connected.

Verdict

Vornin links broad scanning coverage with traceable findings and compliance mapping. Its free tier is constrained, while scheduled scans, exports, and enterprise controls expand by paid plan.

Where Specifiction places it

Alternatives to VorninAll alternatives →