Vornin
vornin.com
What it is
Vornin is cloud vulnerability-management software combining scanning, risk prioritisation, remediation tracking, and compliance evidence in one finding record. It scans attack surfaces, web applications, APIs, networks, code, containers, Kubernetes, and cloud environments. Findings retain ownership, SLA details, discussion, scan evidence, and verification history across scans. Its deterministic score weighs severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age. Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53. Imports include Nessus, OpenVAS, CSV, and JSON; paid plans add SARIF, SBOM, and CSV exports. Integrations include major clouds, Kubernetes, code platforms, collaboration tools, Jira, and Discord. Vornin says data is stored in the EU, fields use AES-256-GCM at rest, and connections use TLS 1.2 or higher. A 14-day Business trial requires no card, then moves to Free unless upgraded.
Spec sheet
- Product
- Vornin combines vulnerability scanning, risk-based prioritisation, remediation tracking, and technical compliance evidence in one finding record.Read 7 Oct 2026 · vornin.com
- Intended users
- The Team plan is described for solo IT and small teams, Business for organisations preparing for NIS2, DORA, or ISO 27001 audits, and Scale for large international organisations with multi-cloud estates or regulated audits.Read 7 Oct 2026 · vornin.com
- Trial
- The free trial provides 14 days of Business-tier access without a credit card; after it ends, the workspace moves to Free unless upgraded.Read 7 Oct 2026 · vornin.com
- Integrations
- The pricing page lists AWS, Azure, Google Cloud, Kubernetes, GitHub, GitLab, Azure DevOps, Slack, Teams, Jira, and Discord integrations, with availability varying by plan.Read 7 Oct 2026 · vornin.com
- Compliance
- Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53.Read 7 Oct 2026 · vornin.com
- Headquarters
- Copenhagen, DenmarkRead 23 Sep 2026 · vornin.com
- Data security
- Vornin states that sensitive fields are encrypted at rest with AES-256-GCM and connections use TLS 1.2 or higher.Read 7 Oct 2026 · vornin.com
- Evidence integrity
- Finding events use a per-tenant SHA-256 hash chain, and Vornin says changing an event invalidates later events in the chain.Read 7 Oct 2026 · vornin.com
- Finding workflow
- Findings retain ownership, SLA, discussion, scan evidence, and verification history across scans.Read 7 Oct 2026 · vornin.com
- Hosting and jurisdiction
- Vornin says it is a Danish ApS and stores vulnerability data, findings, and audit evidence in the EU under EU law.Read 7 Oct 2026 · vornin.com
- Imports and exports
- Vornin can import Nessus, OpenVAS, CSV, and JSON results; paid plans include SARIF, SBOM, and CSV exports.Read 7 Oct 2026 · vornin.com
- Prioritisation
- Its deterministic prioritisation score considers severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age.Read 7 Oct 2026 · vornin.com
- Scan coverage
- It scans attack surfaces, web apps, APIs, networks, code, containers, Kubernetes, and cloud environments.Read 7 Oct 2026 · vornin.com
- Source code handling
- Code scanning uses read-only access, removes the working checkout after scanning, and retains selected redacted excerpts as finding evidence under the plan’s retention policy.Read 7 Oct 2026 · vornin.com
- Support and contact
- Vornin lists [email protected] for pricing questions and [email protected] for vulnerability disclosures, and says it responds to every security report within 48 hours.Read 7 Oct 2026 · vornin.com
Plans and prices
Strong points and limits
Strong points
- Scans code, containers, Kubernetes, clouds, and networks
- Deterministic prioritisation includes exploit and compliance factors
- Nine compliance frameworks are mapped
- EU data storage and encrypted sensitive fields
- Fourteen-day Business trial without credit card
Limits
- Free plan is limited to three targets
- Free plan provides manual scans only
- Paid exports include formats unavailable on Free
- Integration availability varies by plan
Who it suits
Vornin suits solo IT teams, organizations preparing for regulated audits, and large multi-cloud estates, matching its Team, Business, and Scale descriptions. It is useful where scanning, remediation ownership, and compliance evidence need to stay connected.
Verdict
Vornin links broad scanning coverage with traceable findings and compliance mapping. Its free tier is constrained, while scheduled scans, exports, and enterprise controls expand by paid plan.
Where Specifiction places it
- Vulnerability Scanning Software#17 of 357.7