Network security audit evidence
from one read-only scan.
Generate hash-chained, auditor-ready evidence for SOC 2, HIPAA, NIST CSF 2.0, PCI DSS, ISO 27001, CIS Controls v8, GDPR Article 32, and NIST SP 800-171 Rev 2 — across AWS, Azure, and GCP. Zero Data Exfiltration. Runs entirely inside your infrastructure.
NSAuditor AI Enterprise is the enterprise edition of the Nsauditor network security auditor — the same read-only scanning discipline, extended to AWS, Azure and GCP and mapped to eight compliance frameworks. New to the practice? Start with the network security audit checklist.
EE 0.46.0 — every PCI DSS citation your QSA reads is derived from the standard itself. Every compliance product cites standards. This is the release where NSAuditor reads its PCI DSS v4.0.1 citations from the PCI SSC publication rather than from a summary of it: sub-requirement identifiers, Customized Approach eligibility and the objective column are derived into a self-validating artifact that the mapping file points at — one source, no second copy to drift. Eligibility is read from where the standard states it, each requirement’s own Customized Approach Objective cell, and every one of the 28 mapped controls is Customized-eligible. Each objective says, per control, whether it is the requirement cell’s own wording or NSAuditor’s paraphrase, and the report labels it from that flag. A citation a QSA can check against the standard is evidence; one they cannot is doubt. So the derivation ships guarded: a build guard fails on any cited identifier the standard does not contain, and every objective flagged verbatim is checked against the document in both directions — a drifting citation is a red test, never a line in your report. The PCI DSS matrix is enumerated at 19 covered + 9 partial + 44 out-of-scope across 72 sub-requirements — covered and partial unchanged, no control changed status — and the other seven matrices are unchanged. Paired with CE 0.2.53 + agent-skill 0.2.51; floor unchanged at CE ≥ 0.2.49.
Previously — EE 0.45.0 (2026-09-07): evidence that says only what it can prove. Report time is anchored by RFC 3161 trusted timestamping, opt-in via NSAUDITOR_TSA_URL, from the Time-Stamp Authority you choose rather than the scanner’s host; the scope attestation states in the artifact that this scanner does not measure its own clock, on an unchanged nsauditor.scope-attestation/v1 schema; and, consistent with that standard, the NTP clock-attestation probe is WITHDRAWN as of EE 0.45.0, its wording guarded against reappearing on any published surface. All eight coverage matrices were unchanged in that release; paired CE 0.2.52 + agent-skill 0.2.50.
Previously — EE 0.44.0 (2026-09-04): the scan you can send.
A finished scan is only evidence if someone outside the terminal can read it.
nsauditor-ai report --from <run> --format executive turns a run that is already on disk
into a self-contained, print-ready HTML report — one file, with the cover page optionally carrying
your own branding via --brand. It opens with no external network reference,
so it survives an email attachment, a shared drive and a browser with no internet.
--format jira writes a Jira-importer CSV instead. Pro and Enterprise tiers.
It states what it could not read.
The dangerous report is not the one that finds nothing — it is the one that silently leaves a
source out and looks complete. Every report carries a container census: if finding-like records sit in a
place the renderer does not read, the page says so, named and counted, where the reader will see
it. Silence is disclosed, never rendered as absence.
An audit-trail gap now means both trails are missing.
S3 server access logging being off is no longer reported as a gap when a CloudTrail data-event trail
already covers that bucket. Coverage is judged per selector, and an organisation trail or a
prefix-scoped selector is refused rather than assumed — so the credit is only ever
given where it can be shown. Fewer findings; the ones that remain are real.
Previously — EE 0.43.0 made the scanner say when it did not
look: a cloud whose SDK never loaded reports as not audited rather than clean, an evidence gap
states a cause instead of a typed command, and the offline carrier is pinned to the dependency versions
its test suite runs against. Earlier releases are in the CHANGELOG.
Scope: a report renders a scan that already exists — it runs nothing, contacts nothing and adds no finding. The executive HTML embeds its own styling, so it opens offline; the Jira output is an import file rather than an integration, and the field mapping is done in Jira — we do not claim it verified against a live instance. The container census is a disclosure, not a finding: it routes to zero controls by design, and it names where the unread records sit so a reader can go and look. Coverage credit for an audit trail is granted per CloudTrail selector and withheld wherever it cannot be proven, because a clean page over an unread surface is the one result that costs an audit.
Recent releases — 0.42.0 AWS partition handling for GovCloud, China, ISO and European Sovereign estates · 0.41.0 the 29th plugin: Amazon DocumentDB gets its own auditor · 0.40.0 the eighth framework: NIST SP 800-171 Rev 2 for CMMC Level 2 prep · 0.39.0 every cloud provider declares what it does not evaluate · 0.38.0 sign the evidence pack, and verify more than the signature. Full changelog →
You're 6 weeks from your audit. You don't have weeks of evidence.
SOC 2 auditors don't accept "we configured it that way once" — they need contemporaneous, attested evidence that your AWS, Azure, and GCP environments actually enforce the controls you claim. Most teams gather this manually: screenshots, CSV exports, IAM JSON pasted into a shared drive. It takes weeks, and the evidence is rejected the first time half the time.
scan_compliance_soc2.json + .html + .md, mapped directly to AICPA Trust Services Criteria controls. Hand it to your auditor.
shasum -a 256 -c. Proves the report bytes have not changed since the scan wrote them. (The chain itself is SHA-256 and nothing more. RFC 3161 trusted timestamping has been available since Enterprise 0.33.0 and is opt-in with no default, ever, because the request is an outbound call to the authority you name; Ed25519 evidence-pack signing ships as of Enterprise 0.38.0, and a verified signature covers one framework’s chain-of-custody envelope plus the artifacts that envelope enumerates — never the output directory, never the pack as a whole, and never a vendor attestation, because the key is operator-held.)
COMPLIANCE_GRC_PROVIDER=vanta (or drata / secureframe) + COMPLIANCE_GRC_TOKEN and the compliance phase maps each finding to your GRC platform’s evidence/test records and pushes them — opt-in, ZDE-redacted egress, token never serialized. The Vanta, Drata and Secureframe connectors carry audit-grade transport with rate-limit backoff, a circuit breaker, response-body capping, suppression-aware outcomes, deterministic framework-dimensioned idempotency, and a per-attempt audit log for chain-of-custody. All three are shipped, opt-in and early-access. Live validation against production Vanta/Drata/Secureframe tenants is in progress; the integration is single-workspace and operator-configured (not a multi-tenant sync); Secureframe’s API shape is published-assumed with live-tenant validation deferred to partner intake. Full setup & details in the GRC Connectors guide →
Walk through a real scan — synthetic data, real engine output.
A complete sample scan against a fictional Acme Corp AWS account + home-office router. See the transitive SG chain reachability finding, the multi-region GuardDuty audit, the dnsmasq CVE detection, and the evidence pack. No signup required.
28 cloud · AWS · Azure · GCP
controls covered
regression suite
enumerated per scan
sidecar per artifact
by architecture
Three reasons security teams standardize on NSAuditor
Security isn't enough — you have to prove it. Every audit asks for evidence that your cloud actually enforces the controls you claim. NSAuditor generates seven hash-chained evidence packs from one read-only scan.
The same proof is demanded by your SOC 2, HIPAA, and PCI DSS QSA auditors, your ISO/IEC 17021-1 certification-body assessors, and your CIS Controls v8 self-attestation (CSAT / CIS-CAT Pro) — plus the IG1 baseline your cyber-insurance underwriter wants.
Pass audits faster
One scan. Eight evidence packs. Hash-chained and auditor-ready. Replace weeks of manual screenshots and spreadsheet evidence with a single read-only command your assessors can verify.
Keep your data private
Runs inside your infrastructure with Zero Data Exfiltration. No ePHI, no cardholder data and no cloud credentials ever leave your network, and no scan data or evidence artifact is ever transmitted to Nsasoft. Air-gapped operation and offline licensing. Zero BAA required.
Find what other scanners miss
Deep cloud auditing across 28 cloud auditors: cross-account exposure, backup and snapshot exposure, transitive security-group reachability paths, IAM shadow-admin chains, and exploit-first, risk-scored findings — not just a checklist.
From cloud account to audit evidence — in one command
NSAuditor AI Enterprise turns one read-only cloud scan into eight hash-chained, auditor-ready evidence packs — without sending your cloud configuration outside your infrastructure.
One scan, eight frameworks
SOC 2, HIPAA, NIST CSF 2.0, PCI DSS, ISO 27001, CIS v8, GDPR Article 32, and NIST SP 800-171 Rev 2 evidence generated in parallel from a single run.
Zero Data Exfiltration
Your cloud data, credentials, and findings stay inside your infrastructure. Nothing is sent to us — by architecture, not policy.
Read-only by design
Scanners are restricted to read-only cloud APIs — enforced in code, not policy: a build-breaking test in our mandatory pre-publish suite fails if any plugin imports a mutating SDK call. NSAuditor never modifies your resources — safe for production.
Hash-chained evidence
Every artifact carries a SHA-256 chain-of-custody sidecar your auditor can verify offline — integrity proof, not screenshots.
Multi-cloud coverage
Audit AWS, Azure, and GCP from one tool, with per-account and per-region scoping built in.
Air-gapped operation
Offline JWT licensing and air-gapped operation for PCI CDE-isolation and ISO 27001 scope-controlled environments, plus the evidence layer that feeds a DFARS / CMMC programme.
Your cloud never leaves your infrastructure
Unlike SaaS scanners that pull your cloud inventory into their platform, NSAuditor runs entirely inside your environment. License validation is offline. Nothing about your cloud is transmitted to us — this is Zero Data Exfiltration by architecture, not policy.
Your infrastructure. Your evidence. Your control.
See NSAuditor AI Enterprise in action
Eight minutes, regenerated on EE 0.46.0 — it opens on the screenshot problem, walks the five problems one read-only scan solves, and ends on why an auditor can check every integrity claim with standard openssl without trusting the vendor or the customer. Here is what you will see:
- The screenshot problem
- Five compliance problems, one scan
- Eight framework-mapped evidence packs, each cited in its own vocabulary
- Approvals checked against your own registry
- Opt-in RFC 3161 timestamps from the authority you name
- Who it is for, and one honest limit
See a real audit report
No screenshots. No mockups. A complete report generated by NSAuditor AI Enterprise — synthetic data, real engine output. Walk through the transitive security-group reachability finding, the multi-region GuardDuty audit, the dnsmasq CVE detection, and the evidence pack. No signup required.
Cloud Scanners
AWS security groups + IAM, GCP firewall rules + IAM bindings, Azure NSGs + RBAC. Uses your own credentials — nothing touches Nsasoft.
Compliance Engine
Map findings to NIST CSF, CIS Controls, HIPAA Security Rule, GDPR Art. 32, and PCI DSS. Gap reports with evidence references.
GRC Platform Connectors
Opt-in scan-time push to Vanta, Drata, and Secureframe — findings mapped to the platform's evidence/test records, with retry/backoff, framework-dimensioned idempotency, and ZDE-redacted egress. Early-access, single-workspace.
Zero Trust Assessment
Evaluate segmentation boundaries, encryption-in-transit, identity posture, and lateral movement risk. Composite readiness score.
Air-Gapped Operation
Delivery vehicle, not a security boundary: a linux/amd64 container image or an npm host install. Offline license verification (ES256 against an embedded public key, no phone-home, no heartbeat, tcpdump-verifiable) and offline CVE matching under NSAUDITOR_OFFLINE_ONLY=1. Runs a full scan-to-evidence-pack workflow in an isolated network once configured for it — a default scan attempts NVD egress unless that flag is set. Air-gapped delivery ships since Enterprise 0.37.0: a dependency-complete bundle carrying both editions, its own install script and SHA-256 checksums, restricted distribution — verified on native aarch64 as well as amd64, so an arm64 enclave is covered. The bundle is integrity-checked, not authenticated. Deliberately not claimed: no arm64 container image, and no recurring feed-data delivery service.
Zero Data Exfiltration
Read-only-credential enforcement — cloud plugins are gated by a build-breaking test to use only read-only SDK verbs — plus egress redaction on the outbound paths that exist — always-on for AI prompts, and configurable for GRC pushes (off by default; enable it in the connector config). Zero data exfiltration by architecture, not by policy.
CTEM — Continuous Monitoring
Unlimited scan-history retention (the Community 7-day prune is lifted; history persists as JSONL for cross-scan comparison), delta detection, and severity-thresholded webhook alerting.
AWS S3 Auditor (Plugin 1020) effective-public-exposure
The foundational S3 bucket-security auditor. The effective-public-exposure model: missing or partial PublicAccessBlock now escalates to MEDIUM (a guardrail gap, not current exposure), and top severity is reserved for confirmed-public via bucket policy OR a new GetBucketAcl check that completes the ACL × policy × PAB join. A public AllUsers / AuthenticatedUsers grant is top-severity unless the PAB IgnorePublicAcls neutralizes it (then LOW). Closes a public-via-ACL false-negative class while fixing the false-positive class — live-revalidated against a real prod account (12 top-severity findings → 11 verified not-public + 1 genuinely-public policy). Maps to CC6.6 + C1.1.
GCP Cloud Storage Auditor (Plugin 1024) GCP plugin · multi-cloud storage triad complete
Third leg of the cloud-storage audit triad, completing the multi-cloud picture alongside plugin 1020 (AWS S3) and plugin 1022 (Azure Storage). Audits across 6 SOC 2 substrate-evidence dimensions: Bucket-level IAM public bindings (CC6.6 — allUsers = CRITICAL zero-trust bypass; allAuthenticatedUsers = HIGH Google-account-trust bypass; co-existence surfaces both findings with merged evidence), Uniform Bucket-Level Access (CC6.6 + C1.1 — enforces IAM as single source of truth, no legacy ACL surface; disabled = MEDIUM), Object Versioning (C1.1 + A1.2 — accidental object deletion reversibility; disabled = MEDIUM), Retention Policy / Bucket Lock (C1.1 + C1.2 — three-tier: missing = MEDIUM, unlocked = MEDIUM, locked = PASS; SEC 17a-4 / FINRA 4511 WORM alignment), CMEK via Cloud KMS (CC6.1 — four-tier key-custody ladder matching plugin 1140 RDS pattern; full-format 6-segment Cloud KMS resource-path regex gates PASS tier; malformed reference = LOW + evidenceGap per conservative_classifier_principle), and Bucket-level access logging (CC7.1 — missing = MEDIUM; separate destination bucket = PASS; self-logging = INFO + walkthroughRequired). _callGcsWithInstrumentation wraps GCS API calls with AccessDenied counter + throttle-retry + wall-budget (Thread H equivalent). ZDE — only GCS-public-namespace identifiers (bucket names, KMS paths) propagate to findings; operator labels never read. 20 new soc2.json titlePattern entries (5 CC6.6 + 3 CC6.1 + 2 CC7.1 + 5 C1.1 + 3 C1.2 + 2 A1.2). 101 new tests across 17 suites. Maps to CC6.1 + CC6.6 + CC7.1 + C1.1 + C1.2 + A1.2.
GCP IAM Project-Level Auditor (Plugin 1025) 7 dims · GCP IAM deep-audit cohort
GCP counterpart to plugin 1030 AWS IAM Deep Auditor at the project boundary — audits the full GCP project IAM policy surface across 7 SOC 2 substrate-evidence dimensions (v2 scope). v1 dims (3): Project IAM public-member bindings (CC6.1 — allUsers CRITICAL / allAuthenticatedUsers HIGH); Sensitive-role inventory of 12 predefined roles (CC6.1 + CC6.6 MEDIUM); IAM Conditions classifier (CC6.1 — restrictive CEL = PASS; absent = MEDIUM; vacuous = LOW + evidenceGap). v2 dims (4): Custom-role permission audit (CC6.1 — wildcard * sentinel = CRITICAL; 16-entry admin-equiv allowlist intersection = HIGH); Service-account key custody (CC6.1 + C1.1 — user-managed long-lived keys = HIGH; per-SA keysFetchError propagation for audit-principal partial-permission scenarios); Service-account impersonation graph BFS (CC6.1 — 4-hop cycle-safe traversal of 3 canonical impersonation roles; 2-hop = HIGH, 3+ hop = CRITICAL; project-scope fan-out bindings classified as CRITICAL _CAT_SA_IMPERSONATION_PROJECT_SCOPE — a real GCP privesc class missed by per-SA-only inventory); Org Policy constraint enumeration (CC6.6 + C1.1 — 4 sensitive constraints incl. iam.disableServiceAccountKeyCreation; explicit reset detection). NEW utils/gcp_auth.mjs shared helper for GOOGLE_IMPERSONATE_SERVICE_ACCOUNT credential chain (keyFile / ADC / ADC+impersonation). 33 soc2.json titlePattern entries total (11 v1 + 22 v2 across CC6.1 + CC6.6 + C1.1). +180 new tests this cycle (5715/5715). Maps to CC6.1 + CC6.6 + C1.1.
AWS IAM Deep Auditor (Plugin 1030)
Transitive shadow-admin path detection — including PassRole privesc and group-inherited cross-principal chains. Every finding carries a verifiable [via policy: ARN] evidence trail with partialProvenance / provenanceComplete completeness signals for SOC 2 Type-II auditors.
AWS CloudTrail Operational Integrity Auditor (Plugin 1040)
Audits CloudTrail trail health (multi-region default-ON across 36 canonical AWS regions, log-file validation, KMS-CMK, IsLogging), CloudWatch alarm coverage against CIS AWS Foundations Benchmark v1.5 §3.1–3.14 via the v2 metric-filter audit, AWS Config recorder + Organizations ConfigurationAggregator detection with deterministic STS account-coverage cross-reference, and cross-account S3 trail-destination WORM verification (Object Lock + Versioning + MFADelete per trail bucket) for SEC 17a-4 / FINRA 4511 retention evidence. Closes SOC 2 CC7.2 + CC7.3.
AWS API Gateway Assurance Auditor (Plugin 1050)
First entry-point evidence plugin for AWS Serverless-Framework deployments. Audits REST APIs (v1) + HTTP APIs (v2): per-method/route authorization classifier (NONE = CRITICAL, AWS_IAM / Cognito / JWT = PASS, JWT-with-wildcard-audience = INFO with IdP issuer/audience evidence, Lambda authorizer = INFO with manual-verification prompt), TLS policy with worst-policy tracking across mixed-config v2 domains (TLS_1_0 = HIGH), stage-level access logging, throttling (A1.2), and WAF association. SOC 2 mapping: CC6.1 + CC6.6 + CC6.7 + CC7.1 + A1.2.
AWS DynamoDB Audit Integrity Auditor (Plugin 1060) audit-the-auditor
The "audit-the-auditor" plugin — answers the question every Type-II auditor asks after the entry-point one: can the audit record itself be tampered with? Per-table PITR + deletion protection (worst-case CRITICAL "audit record itself not survivable" when both missing). KMS-CMK classifier with conservative LOW-unverifiable posture on :key/UUID ARN shapes (a deterministic PASS/MEDIUM when plugin 1070 is in the same scan). Resource-policy presence audit via the 2024 GetResourcePolicy API with soft-degrade. CloudTrail DynamoDB data-event coverage cross-reference (orthogonal composition with plugin 1040). Matrix shift: PI1.5 (Stored items) moves out-of-scope → partial. Mapping: CC6.6 + CC7.1 + C1.1 + PI1.5.
AWS KMS Auditor (Plugin 1070)
Validates cryptographic boundary integrity and key governance. Per-key rotation status (customer-managed CMKs flagged MEDIUM when rotation disabled; AWS-managed keys correctly identified as not-applicable). Wildcard-principal classifier across 5 severity tiers: CRITICAL unconditional kms:* takeover; HIGH for sensitive actions; INFO read-only-only; PASS no-wildcard. Coverage spans Principal.AWS / Federated / Service / CanonicalUser shapes + case-insensitive AWS/action matching + NotPrincipal-Allow + NotAction-Allow + glob-action coverage. Exports _describeKeyManager() helper consumed by plugin 1060. Maps to CC6.3 + C1.1. 77 new tests.
AWS Lambda Security Auditor (Plugin 1080)
Runtime EOL detection (institutional-CRITICAL when Lambda returns EOL runtime like nodejs16.x / python3.7; case-normalized at the SDK boundary), public function-URL exposure, resource-policy permissive principals, environment-variable secret-suggestive name detection (ZDE-safe: secret VALUES never inspected — only names + presence), VPC configuration, KMS-CMK vs AWS-managed key custody, dead-letter queue + reserved concurrency posture. Maps to CC6.1 / CC6.6 / CC7.1 / C1.1.
AWS Secrets Manager + SSM Parameter Store Auditor (Plugin 1090)
Secrets Manager ListSecrets + DescribeSecret (rotation enabled/disabled, last-rotated cadence, KMS-CMK vs AWS-managed key custody, tag-driven prod-tier classification). SSM Parameter Store DescribeParameters (String vs SecureString classification with secret-suggestive name detection, KmsKeyId presence on SecureStrings). ZDE-critical: scanner NEVER calls GetSecretValue / GetParameter — only Describe* / List* metadata APIs; verb-prefix denylist regex enforces this at SDK boundary. Maps to CC6.1 / CC6.6 / C1.1.
AWS CodePipeline + CodeBuild Operational Integrity (Plugin 1100)
Pipeline source-stage encryption (KMS-CMK presence), CodeBuild privilegedMode detection (HIGH for non-Docker-image builds), buildspec inlined-vs-S3 (configuration drift surface), secrets passed via environment variables vs Secrets Manager reference, IAM role least-privilege via wildcard-Action detection, S3 artifact-store encryption. Runtime-state audit: stale-execution detection — pipeline's latest execution older than configured cadence isn't actively defending the build path. Maps to CC6.1 / CC7.1 / CC8.1 / C1.1.
IAM Effective Decrypt-Path Auditor (Plugin 1110)
Cross-plugin reconciler: walks IAM policies for kms:Decrypt / kms:ReEncrypt* / kms:GenerateDataKey grants then cross-references against destination KMS key policies (plugin 1070) to compute the effective decrypt path. Closes the institutional NotAction-implicit-decrypt false-PASS class (Allow + NotAction:[...] + Resource:* over-grants decrypt implicitly). A cross-plugin sister-fix in plugin 1030 case-normalizes Effect+Action discriminators. Maps to CC6.1 / CC6.6 / C1.1 / C1.2.
AWS S3 Lifecycle + Cross-Region Replication Auditor (Plugin 1120)
S3 lifecycle policy enumeration (CC7.1 retention-cadence evidence) + cross-region replication topology (A1.2 disaster-recovery substrate). Destination-bucket reachability verification adds a cross-region check (closes silent-PASS class where replication source FAILED but emitted clean — destination IAM denial or missing bucket now surfaces explicitly). Maps to C1.1 / C1.2 / A1.2.
AWS Backup Auditor (Plugin 1130) — Headline Thread 18 sessions · 545 tests
The largest single-plugin institutional-hardening arc in the EE codebase: ~7800 lines across 18 sessions / 25 commits / 545 plugin tests, with 19 R2-strict recurrence-class same-session closures catalogued in 4 institutional-memory artifacts. Audits the AWS Backup substrate end-to-end: Plans + Vaults + Recovery Points + Selections + Frameworks + Restore Testing + ReportPlans + Legal Holds + VaultType + Vault Tags + Vault Access Policy. Headline capability: 12-dimension air-gapped vault attestation arc for LogicallyAirGappedBackupVault resources — 6 cryptographic-isolation mechanisms (vault TYPE air-gapped + ARN account-segment-separation + destination KMS key-policy clean + destination KMS Grants clean + MRK-replica topology clean + source-account VPC-endpoint policy clean) PLUS 6 substrate dimensions (PITR / retention / encryption / RestoreTesting / Legal Holds / vault Access Policy). Cross-service SDK integration (KMS / EC2 / Config / Backup). 74 new soc2.json titlePatterns across CC6.3 + CC6.6 + CC7.1 + CC8.1 + C1.1 + C1.2 + A1.2. Substantially closes the previously-documented A1.2 "Backup/recovery posture itself" ransomware-defense gap (SEC Rule 17a-4 / FINRA 4511).
AWS RDS Auditor (Plugin 1140) 7 dims · headline kms:DescribeKey cross-reference
The single most-asked-about audit substrate after S3, with 7 SOC 2 substrate-evidence dimensions. Multi-AZ deployment (A1.2 availability), storage encryption at rest with KMS-key custody classification (C1.1 confidentiality — four-tier severity ladder), parameter-group SSL enforcement (C1.1 transit encryption — detects both postgres rds.force_ssl and mysql require_secure_transport), backup retention period (A1.2 cadence — operator-tunable 1–35 days; default ≥7 institutional baseline), public accessibility (CC6.6 perimeter — cross-plugin sister to plugin 1170), IAM database authentication (CC6.1 password-less auth on mysql/postgres/mariadb/aurora-variants), and snapshot encryption via DescribeDBSnapshots with explicit IncludeShared=false + IncludePublic=false (C1.1 cross-cycle). Headline v2 capability: kms:DescribeKey cross-reference promotes UNVERIFIABLE :key/UUID ARN shapes to deterministic PASS (KeyManager=CUSTOMER) or MEDIUM (KeyManager=AWS) — closes the v1 fixture-design gap without compromising the conservative_classifier_principle (AccessDenied / NotFound / unknown KeyManager still leaves at LOW). 18 new soc2.json titlePattern entries across A1.2 + C1.1 + CC6.1 + CC6.6. 103 tests total (51 v1 + 52 v2). Maps to A1.2 + C1.1 + CC6.1 + CC6.6.
AWS SQS / SNS Auditor (Plugin 1150) multi-service plugin
First multi-service plugin in the EE codebase — SQS + SNS bundled because they share the same auth surface, region scoping, and SOC 2 control coverage. Audits queues + topics across 5 SOC 2 substrate-evidence dimensions: SQS encryption at rest (C1.1 — four-tier severity ladder matching plugin 1140's structure with conservative LOW+evidenceGap on :key/UUID ARN form), SQS transit-encryption policy (CC6.6 — analyzes Policy for aws:SecureTransport=false Deny defense-in-depth), SNS topic encryption at rest (C1.1 — SNS has no managed-SSE equivalent so absent = HIGH), SNS topic-policy permissive-Principal classifier (CC6.6 — full institutional posture with NotAction-Allow + NotPrincipal-Allow + Resource-scope filtering; severity CRITICAL unconditional-wildcard → HIGH conditional-wildcard → PASS no-wildcard), and SQS dead-letter queue presence (A1.2 availability + CC7.1 anomaly-detection, dual-mapped — missing DLQ is the canonical silent-message-loss class for event-driven architectures). 11 new soc2.json titlePattern entries. 95 new tests. First EE plugin to ship without a smoke-time SDK hotfix — institutionalized pre-implementation checklist now adds optionalDependencies entries preemptively. Maps to C1.1 + CC6.6 + A1.2 + CC7.1.
AWS VPC Endpoints Auditor (Plugin 1160) private-path data-flow substrate · CC6.6
Audits VPC endpoint coverage for AWS-service traffic kept off the public internet. Enumerates interface endpoints (com.amazonaws.region.svc) and gateway endpoints (S3 + DynamoDB) across the audited regions. Endpoint-policy permissive-Principal classifier (wildcard "*" / {"AWS":"*"} / NotPrincipal-Allow shapes), private-DNS posture for interface endpoints (private resolution prevents accidental public-DNS fallback), and route-table attachment verification for gateway endpoints. Closes the silent class where data-plane traffic to AWS services is routed via the public internet despite a hardened SG perimeter. Maps to CC6.6.
AWS EC2 SG Perimeter Auditor (Plugin 1170) 23 restricted ports · CIS AWS Foundations v3.0
Orthogonal evidence to plugin 1023 zero-trust-checker: 1023 reads OBSERVED open ports from prior network probes; 1170 reads DECLARED SG policy via DescribeSecurityGroups. The pair gives Type-II auditors complete coverage of "is this port reachable, and is it supposed to be?" RESTRICTED_PORTS spans 23 ports per CIS AWS Foundations Benchmark v3.0 — including Redshift (5439), Kubernetes API server (6443), etcd (2379-2380), Kibana (5601), InfluxDB (8086), Kafka (9092), Consul (8500), ZooKeeper (2181), HashiCorp Vault (8200). New opts.additionalRestrictedPorts operator-config (integer-validated 0-65535 + deduped) lets tenants extend the list with custom ports. Per-SG cardinality cap (_USER_GROUP_DISPLAY_CAP=10) with rollup trailer defends against finding-size DoS on 1000+ SG accounts. System-managed-SG name-prefix exclusion list (ElasticMapReduce-, eks-cluster-sg-, AWSServiceRole, awseb-) excludes AWS-service-controlled non-deletable SGs from orphan-detection. 6 audit dimensions: IPv4 0.0.0.0/0 ingress to RESTRICTED_PORTS (CC6.6, CRITICAL), IPv6 ::/0 sibling (CC6.6, CRITICAL), all-protocol (-1) ingress (CC6.6, CRITICAL with SG-scope suppression), public ingress to non-restricted ports (INFO + walkthroughRequired), egress 0.0.0.0/0 (INFO substrate), orphan SGs (CC6.2 governance). 10 new soc2.json titlePattern entries total (v1+v2). 110 tests total (54 v1 + 56 v2). Maps to CC6.2 + CC6.6.
AWS ElastiCache Redis Auditor (Plugin 1180) closes cache-tier SOC 2 gap
First plugin in the 1170-1180 ID range. Closes the canonical cache-tier SOC 2 evidence gap — sister plugin to 1140 RDS for the database tier. Audits Redis clusters across 6 SOC 2 substrate-evidence dimensions: transit encryption (C1.1 — TransitEncryptionEnabled wraps RESP in TLS for client → cluster + primary → replica; cannot be toggled in place), at-rest encryption with KMS key custody (C1.1 four-tier ladder: HIGH unencrypted → MEDIUM AWS-owned-default → MEDIUM alias/aws/elasticache → PASS customer-managed CMK + LOW+evidenceGap on :key/UUID ARN form per conservative_classifier_principle), Redis AUTH / IAM-auth user groups (CC6.1 + CC6.2 — UserGroupIds for Redis 7+ ACL replace long-lived AUTH passwords; cross-plugin sister with plugin 1170 SG-perimeter audit), Multi-AZ deployment (A1.2 availability), SnapshotRetentionLimit cadence (A1.2 — ≥7 days default, operator-tunable 1-35), and subnet placement (CC6.6 perimeter — INFO+walkthroughRequired on default subnet group per conservative-classifier discipline). Dual-API enumeration with inter-API dedup: DescribeReplicationGroups + DescribeCacheClusters covers both replication-group + standalone surfaces; CacheClusters with ReplicationGroupId set are skipped. _ELASTICACHE_SUPPORTED_ENGINES = Object.freeze(new Set(["redis"])) — Memcached out-of-scope by design (no native AUTH; no transit encryption substrate). 16 new soc2.json titlePattern entries (4 CC6.1 + 1 CC6.6 + 5 A1.2 + 8 C1.1). 41 new tests. Third EE plugin to ship without a smoke-time SDK hotfix — preemptive @aws-sdk/client-elasticache (1150 + 1170 + 1180 all shipped without hotfix; now institutional discipline). Maps to C1.1 + CC6.1 + CC6.2 + CC6.6 + A1.2.
AWS SES Email Integrity Auditor (Plugin 1190) closes email-integrity SOC 2 gap for B2B SaaS
First plugin in the 1190-1199 ID range. Closes the canonical email-integrity SOC 2 evidence gap — AWS SES is the dominant transactional + marketing + bulk-email substrate for B2B SaaS workloads. Sister plugin to 1180 ElastiCache Redis (cache tier) + 1140 RDS (database tier) + 1170 SG Perimeter (network tier). Audits SES across 6 SOC 2 substrate-evidence dimensions: DKIM enablement + signing status (CC6.1 / Privacy — HIGH on SigningEnabled=false breaks SPF/DKIM/DMARC trust-chain; 5-enum classifier with PENDING/TEMPORARY_FAILURE/NOT_STARTED → INFO+walkthroughRequired, FAILED → MEDIUM DNS drift, unknown → LOW+evidenceGap per conservative_classifier_principle), custom MailFrom domain alignment (Privacy substrate — INFO+walkthroughRequired on default amazonses.com because DMARC strict alignment impossible without custom MailFrom; PASS on custom + Status=SUCCESS), configuration set TLS enforcement (C1.1 — REQUIRE=PASS (messages REJECTED if no STARTTLS), OPTIONAL=HIGH (silent SMTP-downgrade-attack window — network-layer adversary strips STARTTLS from EHLO, forcing cleartext delivery of message body + headers)), identity sending authorization policy permissive principals (CC6.6 — multi-class wildcard detector covers "*" + {AWS:"*"} + {Service:"*"} + {Federated:"*"} + {CanonicalUser:"*"} + array forms; distinct HIGH category ses-sending-auth-notprincipal-allow catches NotPrincipal+Effect=Allow wildcard-EQUIVALENT class per R-CRITICAL-1 fold; LOW+evidenceGap on malformed statements missing Effect field per R-HIGH-2 fold), dedicated IP pool sending posture (CC7.1 substrate, account-level), and suppression list state (CC7.1 deliverability substrate — INFO on count + reason distribution only). ZDE-CRITICAL invariant: NEVER reads suppressed-destination email addresses — count + reason only; verified at run() envelope boundary via sentinel-string assertion per R-LOW-8 fold. 8 new soc2.json titlePattern entries (3 CC6.1 + 3 CC6.6 + 2 C1.1). 116 tests across 29 suites. 11 same-session reviewer folds — ties the single-cycle record. Fourth EE plugin to ship without a smoke-time SDK hotfix (preemptive @aws-sdk/client-ses + @aws-sdk/client-sesv2 in optionalDependencies — plugins 1150, 1170, 1180, 1190 all shipped without hotfix). Maps to CC6.1 + CC6.6 + C1.1.
AWS Inspector2 / GuardDuty Enablement Auditor (Plugin 1200) managed-threat-detection plugin
First EE plugin to audit AWS managed-threat-detection substrates. Produces the foundation-layer evidence SOC 2 auditors expect under CC7.1 (detection procedures) and CC7.2 (monitoring of system components for anomalies). A SOC 2 evidence pack without GuardDuty signal has no AWS-native anomaly-detection stream — credential-exfiltration attempts, cryptocurrency-mining indicators, malicious-IP communication, and reconnaissance patterns all go unobserved. A pack without Inspector2 signal has no managed CVE-detection coverage on the compute surface (EC2 AMIs, ECR images, Lambda functions). Plugin 1200 audits enablement state across 4 SOC 2 substrate-evidence dimensions: GuardDuty Detector enablement (CC7.1 — flags any audited region with no GuardDuty Detector configured; HIGH on absence), GuardDuty protection-feature coverage (CC7.1 — checks each Detector against the institutional baseline of S3 data events / EKS audit logs / EBS malware protection / RDS login events / Lambda network logs / runtime monitoring; MEDIUM on each missing baseline feature with explicit name in the finding details), Inspector2 enablement (CC7.2 — flags accounts where Inspector2 is not enabled, suspended, or disabled; HIGH on absence), and Inspector2 scan-target coverage (CC7.2 — confirms the institutional baseline resource types EC2 / ECR / Lambda are all enabled for scanning; HIGH on zero coverage, MEDIUM on partial with the disabled list in finding details). For each dimension, plugin 1200 distinguishes auditor-side IAM gaps (the auditor role lacks the GuardDuty or Inspector2 read permission) from genuine service-side absence, so remediation paths are unambiguous. Conservative classification — ambiguous AWS-SDK responses emit LOW+evidenceGap with a walkthrough prompt, never silent-PASS. Case-insensitive enum handling at the SDK boundary defends against case variation across SDK versions. Zero data exfiltration — findings carry only AWS-public-namespace identifiers (Detector IDs, region, status enums); operator-supplied tags / descriptions are never read. Soft-degrade — GuardDuty and Inspector2 SDKs load independently; failure of one does not block the other. 7 new soc2.json titlePattern entries (4 CC7.1 + 3 CC7.2). Maps to CC7.1 + CC7.2.
AWS EC2 Instance Auditor (Plugin 1210) CIS-Hardened-Image substrate-evidence
Multi-region EC2 + EBS instance-level coverage via DescribeRegions (single-region fallback emits an evidence-gap, never silent-PASS). IMDSv1 detection + IMDSv2 hop-limit > 1 with profile-aware severity (CC6.1), EBS volume unencrypted + account default-EBS-encryption disabled (C1.1 + CIS 3.11), public-IP exposure including IPv6 GUA + secondary-ENI / EIP (CC6.6), instance-store evidence-gap, and AMI inventory → cisImageInventory producer — the enablement substrate for CIS-Hardened-Image substrate-evidence credit across the CIS v8 mapping (Safeguards 4.1 / 4.2 / 4.6). Survived 3 review rounds across 5 adversarial skill lenses. Maps to CC6.1 + CC6.6 + C1.1.
Azure Storage Hardening Auditor (Plugin 1220) dedicated Azure auditor · 7 dims
First dedicated Azure auditor beyond the multi-purpose plugin 1022. Owns the Azure Storage Account encryption-at-rest + encryption-in-transit + authorization-mode surface across 7 dimensions: HTTPS-only transit (enableHttpsTrafficOnly), minimum TLS version, Shared Key authorization (allowSharedKeyAccess), infrastructure double encryption (requireInfrastructureEncryption), customer-managed-key reachability + rotation (encryption.keyVaultProperties — verifies key access, not just key reference), blob recoverability (soft-delete + versioning via blobServices.getServiceProperties), and per-container anonymous public access (account-toggle-aware via blobContainers.list). Deliberately non-overlapping with plugin 1022's network-exposure dims — mirrors the AWS 1020+1120 two-plugin S3 split. Maps to CC6.1 + CC6.7 + C1.1 + C1.2 + A1.2.
Azure NSG Perimeter Auditor (Plugin 1221) AWS-1170 parity · UDP transport lane
Azure NSG perimeter analysis at AWS-1170 parity. Evaluates each NSG's inbound rules in Azure priority order (first-match-wins; DenyAllInbound default) across 5 dims: all-protocol (*) public Allow, public-source to RESTRICTED_PORT (SSH/RDP/MSSQL/MySQL/Postgres/Redis/Memcached/MongoDB/Elasticsearch/CouchDB/SMB/WinRM/Oracle/Docker/Kubelet), ::/0 IPv6-wildcard to a restricted port (the dimension 1022's flat lint misses), public→non-restricted INFO substrate, and PASS substrate. Attachment-aware severity via nsg.subnets[] / networkInterfaces[] back-references — attached permissive = EFFECTIVE exposure; orphaned = LATENT. UDP transport lane with 27-port set (RADIUS 1812/1813 + legacy 1645/1646, L2TP 1701, SIP 5060, mDNS 5353, RIP 520, XDMCP 177, chargen 19) for auth backplanes / VPN endpoints / amplification vectors. Effective priority + deny-override resolution; service-tag / ASG-source normalization. Maps to CC6.6.
Azure Key Vault Deep Auditor (Plugin 1222) custom-role resolution + HSM-backing
Third dedicated Azure auditor (after 1220 storage + 1221 NSG). The Key Vault analog of how plugin 1221 deepens plugin 1022's flat NSG dim. Enumerates each vault's keys, role assignments, and diagnostic settings across 5 dimensions: key auto-rotation policy, key expiry (epoch-s/ms/Date/string coerced), diagnostic logging → Log Analytics via @azure/arm-monitor, privileged-access depth (RBAC roleAssignments admin/data-plane/scope-aware tiering + legacy accessPolicies export/wide-crypto breadth + custom-role resolution via roleDefinitions.getById so custom RBAC roles granting KV wildcards are no longer a silent PASS), and HSM-backing software-vs-HSM key.kty discrimination (FIPS 140-2 Level 2/3 hardening recommendation on RSA / EC software-backed keys). Deliberately orthogonal to plugin 1022's vault-property dims — no double-emission. Secret/cert expiry is a stated data-plane scope boundary. Maps to CC6.1 + CC6.3 + CC7.2 + C1.1.
AWS DocumentDB Auditor (Plugin 1230) added in EE 0.41.0
Amazon DocumentDB (MongoDB-compatible) rides the shared RDS control plane, so a docdb cluster's storage-encryption gap could read clean under the RDS auditor's Aurora-only filter. Plugin 1230 owns the docdb engine across 7 dimensions: storage encryption at rest + KMS key-custody classification (customer-alias PASS / AWS-managed / foreign-account & key-UUID custody-unverifiable evidence gaps — encryption is fixed at cluster creation, so the emission gives a migration remediation, never an unrunnable in-place one), TLS enforcement via the tls cluster parameter, audit logging (the audit_logs parameter and the CloudWatch audit export), backup retention, deletion protection, replica/AZ availability topology under the cluster lens (the per-instance Multi-AZ flag is RDS semantics and never consulted), and manual-snapshot public/cross-account restorability (all = CRITICAL). The RDS auditor now engine-filters DocumentDB and Neptune off the shared plane with a standing disclosure that a Neptune estate is unaudited; DocumentDB Elastic clusters are declared deferred. Per-dimension fail-closed evidence gaps. Maps to C1.1 + CC6.1 + CC6.6 + CC7.2 + A1.2.
What Enterprise unlocks in the MCP tools
The Model Context Protocol server registers seven tools and every tier sees all seven. Enterprise unlocks the two that reach your cloud accounts — scan_cloud and get_findings — and puts the 28 cloud auditors and all eight compliance frameworks behind them, so compliance_matrix answers for SOC 2, HIPAA, NIST CSF 2.0, PCI DSS, ISO 27001, CIS v8, GDPR Art. 32, and NIST SP 800-171 Rev 2 rather than for nothing.
Three tiers for every team size. All include the full Enterprise feature set — cloud scanning, the eight-framework compliance engine, air-gapped operation, and the code-enforced read-only guarantee. Annual invoicing · net-30 · volume discounts available.
- ✓ Full Enterprise feature set
- ✓ Email support
- ✓ Onboarding call included
- ✓ Volume discount > 5 nodes
- ✓ Everything in Base
- ✓ Dedicated Slack / email channel
- ✓ Priority response (SLA per contract)
- ✓ Custom compliance mapping help
- ✓ Everything in Growth
- ✓ Dedicated support engineer
- ✓ 4-hour critical · 24-hour standard
- ✓ Custom plugin development
- ✓ CVE matching (offline-first NVD)
- ✓ Parallel analysis agents
- ✓ Risk scoring + prioritization
- ✓ Exploit intelligence — CISA KEV + FIRST EPSS (stores you populate)
- ✓ Intelligence-enriched AI prompts
- ✓ MITRE ATT&CK technique annotations
- ✓ Compliance reports (HTML / JSON / Markdown + print-to-PDF)
- ✓ Sendable executive report —
report --from <run> --format executive(self-contained HTML, optional--brandcover;--format jirawrites an importer CSV) - ✓ Advanced CTEM (unlimited history)
- ✓ Enhanced redaction profiles
- ✓ Pro MCP tools
- ✓ 56 scanner plugins
For security and platform teams
Everything the engineers will ask about — architecture, the read-only execution model, cloud APIs, and the Zero-Data-Exfiltration design. Read the full technical specifications →
Zero Data Exfiltration — architecture
Zero Data Exfiltration — By Architecture, Not Policy
NSAuditor AI Enterprise runs entirely inside your infrastructure. Scan data, findings, reports, and credentials never touch Nsasoft servers. License validation is offline (JWT + embedded public key). We are not a data processor under any regulation.
How it runs — three clouds, one command
CLOUD_PROVIDER=aws AWS_REGION=us-east-1 \ nsauditor-ai scan --host aws --plugins 1020,1030,1040,1050,1060,1070,1080,1090,1100,1110,1120,1130,1140,1150,1160,1170,1180,1190,1200 \ --compliance soc2,hipaa --out tasks/aws-scan-out # 1020 S3 · 1030 IAM Deep · 1040 CloudTrail · 1050 API Gateway · 1060 DynamoDB Audit Integrity · # 1070 KMS · 1080 Lambda · 1090 Secrets+SSM · 1100 CodePipeline+CodeBuild · 1110 IAM Decrypt-Path · # 1120 S3 Lifecycle+Replication · 1130 AWS Backup Auditor (12-dim air-gap attestation) · # 1140 AWS RDS Auditor (10 dims — pgAudit + CWL exports + log retention; CC7.2/CC7.3 database audit-logging) · # 1150 AWS SQS/SNS Auditor (7 dims — CloudWatch alarm coverage on SQS ApproximateAgeOfOldestMessage + SNS NumberOfNotificationsFailed; empty-AlarmActions silent-PASS closure) · # 1170 AWS EC2 SG Perimeter Auditor (23 restricted ports — CIS AWS Foundations v3.0) · # 1180 AWS ElastiCache Redis Auditor (kms:DescribeKey promotion + subnet route-table verifier with default-VPC main-RT-inheritance false-NEGATIVE closure; cross-plugin sister of 1170 SG perimeter) · # 1190 AWS SES Email Integrity Auditor (DKIM CNAME DNS resolution + DMARC TXT parser with pct=0 closure + sp override + SES classic API parity; first network-layer cross-reference in the EE evidence baseline). # Run just the headline plugin: --plugins 1130 (SEC 17a-4 / FINRA 4511 ransomware-defense substrate). # Tune VPC-endpoint PAGE_CAP for large fleets: --plugin-opts '{"1130":{"vpcEndpointsPageCap":50}}'
CLOUD_PROVIDER=azure \ AZURE_TENANT_ID=<your-tenant-id> \ AZURE_CLIENT_ID=<sp-app-id> \ AZURE_CLIENT_SECRET=<sp-secret> \ AZURE_SUBSCRIPTION_ID=<subscription-id> \ nsauditor-ai scan --host azure --plugins 1022 \ --compliance soc2,hipaa --out tasks/azure-scan-out # Baseline (test subscription): findingCount=2, byStatus pass=6 fail=2 # Maps to: CC6.1 (RBAC Owner / Contributor / User Access Administrator at sub-scope), # CC6.6 (NSG inbound from * / 0.0.0.0/0 / Internet), # C1.1 (Storage defaultAction=Allow, allowBlobPublicAccess=true)
GCP_PROJECT_ID=my-project \ GOOGLE_APPLICATION_CREDENTIALS=/path/to/sa.json \ nsauditor-ai scan --host gcp --plugins 1024 \ --compliance soc2,hipaa --out tasks/gcp-scan-out # Plugin 1024: 6 SOC 2 dimensions — IAM public bindings (CC6.6) · UBLA (CC6.6 + C1.1) · # Object Versioning (C1.1 + A1.2) · Retention Policy / Bucket Lock (C1.1 + C1.2) · # CMEK via Cloud KMS (CC6.1) · Bucket-level access logging (CC7.1). # Full GCP discovery: GCP_PROJECT_ID=my-project nsauditor-ai scan --host gcp --plugins all --compliance soc2,hipaa
GCP_PROJECT_ID=my-project \ GOOGLE_APPLICATION_CREDENTIALS=/path/to/sa.json \ nsauditor-ai scan --host gcp --plugins 1025 \ --compliance soc2,hipaa --out tasks/gcp-iam-scan-out # Plugin 1025 v2: 7 SOC 2 dimensions — Public-member bindings (CC6.1 CRITICAL/HIGH) · # Sensitive-role inventory: 12 predefined roles incl. owner/editor/iam.securityAdmin/serviceAccount* (CC6.1+CC6.6 MEDIUM) · # IAM Conditions classifier on sensitive roles: restrictive CEL = PASS · absent = MEDIUM · vacuous = LOW+evidenceGap (CC6.1). # Run all GCP plugins: GCP_PROJECT_ID=my-project nsauditor-ai scan --host gcp --plugins 1024,1025 --compliance soc2,hipaa
# One per-account dotenv file each — credentials, region, CLOUD_PROVIDER live in the file: nsauditor-ai scan --host aws --env ~/envs/dev.env --compliance soc2 nsauditor-ai scan --host aws --env ~/envs/prod.env --compliance soc2 # Or a named profile from the OS-default ~/.aws/credentials (no .env needed) — implies CLOUD_PROVIDER=aws: nsauditor-ai scan --host aws --aws-profile prod --compliance soc2 # GCP / Azure per-account via --env (key-file path / service-principal vars live in the file): nsauditor-ai scan --host gcp --env ~/envs/gcp-prod.env --compliance soc2,cis-v8 nsauditor-ai scan --host azure --env ~/envs/azure-prod.env --compliance soc2 # --env is a dotenv (KEY=value) file; for ~/.aws/credentials (multiple profiles) use --aws-profile. # Missing --env file = hard error (fail-fast — never silently audit the wrong/empty account). # On a sentinel host, --plugins all AUTO-SCOPES to that cloud's plugins (other clouds + non-cloud skipped + logged). # Your license is resolved independently of --env — no key needed in the per-account file.
# Audit one region, a comma-separated list, or EVERY account-enabled region. The regional auditors # (security groups, EC2, RDS, KMS, Lambda, DynamoDB, Backup, SQS/SNS, SES, Inspector/GuardDuty, CloudTrail, …) # run in every in-scope region; S3 resolves each bucket's own region — closing cross-region false-cleans. nsauditor-ai scan --host aws --plugins all --aws-region us-east-1 --compliance soc2 nsauditor-ai scan --host aws --plugins all --aws-region us-east-1,eu-west-1,ap-southeast-2 --compliance soc2 nsauditor-ai scan --host aws --plugins all --aws-region all --compliance soc2 # Precedence: --aws-region › AWS_REGION › single-region default. No flag = one region (and the report # discloses the unscanned regions); pass --aws-region all for full coverage. Unknown region = fail-fast. # In Claude Desktop, ask for "all regions" — coverage is batched by region group to fit the ~60s tool-call limit.
MCP tools for AI assistants
The MCP server registers seven tools, and every tier sees all seven listed. Your licence decides which ones run: the gate is at call time, so an unlicensed call returns a clear refusal rather than a silent empty result. Enterprise does not add tools — it unlocks the two that reach your cloud accounts, and it is what puts 28 cloud plugins and eight frameworks behind the ones you already had.
# @nsasoft/nsauditor-ai-ee is a private (restricted) package. # Use the npm read-token delivered with your license email. npm config set //registry.npmjs.org/:_authToken npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx # Or, project-scoped, in an .npmrc file echo "//registry.npmjs.org/:_authToken=npm_xxxx..." >> ~/.npmrc
# Free Community Edition (nsauditor-ai) is the 27-plugin base. # The Enterprise package (@nsasoft/nsauditor-ai-ee) installs on top, adding 29 plugins — 28 cloud auditors # plus a network-host Zero Trust assessment → 56 total once licensed. npm install -g nsauditor-ai@latest @nsasoft/nsauditor-ai-ee@latest # Driving NSAuditor from an AI agent or Claude Desktop? Add the agent skill — it teaches the # agent NSAuditor's MCP tools, schemas, plugins and audit workflows (knowledge only; the MCP # server above still does the scanning): npm install -g nsauditor-ai-agent-skill@latest # • Claude Desktop: Settings → Skills → Create skill → Upload a skill, and upload SKILL.md. # • Claude Code / Cursor / Windsurf: copy the package's SKILL.md folder into the agent's skills dir. # Docs: https://www.npmjs.com/package/nsauditor-ai-agent-skill
# CE 0.2.24+ verifies the JWT signature before persisting # and stores the key in macOS Keychain (or ~/.nsauditor/.env mode 0600 on Linux/Windows). nsauditor-ai license install enterprise_eyJhbGciOiJFUzI1NiIs... ✓ Enterprise license installed Stored at: macOS Keychain (service=nsauditor-ai) Org: you@example.com Seats: 5 Expires: 2027-04-04T... # CI/CD alternative: env var still works (highest priority in the multi-source loader) export NSAUDITOR_LICENSE_KEY=enterprise_eyJ...
nsauditor-ai license --status ✓ Enterprise license active | Org: you@example.com | Seats: 5 | Expires: 2027-04-04 nsauditor-ai license --capabilities ✓ intelligenceEngine ✓ riskScoring ✓ complianceEngine ✓ cloudScanners ✓ zeroTrust ✓ enterpriseMCP
# Dual-framework SOC 2 + HIPAA §164.312 audit in one scan — both evidence packs from the same findings nsauditor-ai scan --host aws --plugins all \ --compliance soc2,hipaa
--compliance soc2 or --compliance hipaa. For per-cloud and on-prem recipes, see the Cloud audit samples section below.
Frequently asked questions
Does NSAuditor send our cloud data to your servers?
Which compliance frameworks and clouds are supported?
Is the scan safe to run against production?
Can it run air-gapped or fully offline?
Is the evidence auditor-ready?
How is NSAuditor AI Enterprise priced?
Is there a free version?
Ready to get started?
Pick the Enterprise tier that fits your team — Base, Growth, or Scale. All tiers include the full Enterprise feature set, with onboarding call included.
Installing where the host cannot reach a registry
A scanner on an isolated network has a standing problem: the vulnerability data it matches against lives on the internet, and it does not. Enterprise ships a dependency-complete bundle carrying both editions, an install script and SHA-256 checksums — a restricted distribution — so the install and the CVE data can both be carried in.
The condition travels with this path and is part of the offer, not a footnote:
the bundle is a restricted distribution rather than a public
npm install. It is not architecture-restricted — the install
script is verified on native aarch64 as well as amd64, so an arm64 enclave is
covered by this path. The published container image is amd64 only; that is a
different delivery vehicle from this bundle.
No CVE, KEV or EPSS data ships with the product. You download the NVD feeds you want on a connected host, bundle them, and carry the archive across. Your own CISA KEV catalogue and FIRST EPSS scores can ride the same archive. Both fail closed when stale, so an out-of-date catalogue never reports “not exploited”.
⚠️ A carried bundle is integrity-checked, not authenticated. The recorded SHA-256 detects a file altered in transit, but it travels inside the archive it covers, so it cannot establish who built it.
The install, end to end. On a connected host, authenticate with the download token from your purchase email and fetch the bundle:
npm pack @nsasoft/nsauditor-ai-ee-airgap@0.46.0
tar xzf nsasoft-nsauditor-ai-ee-airgap-0.46.0.tgzCarry the extracted directory to the isolated host and run its script. It verifies the carried checksums before installing anything, installs Community Edition first (Enterprise declares a peer dependency on it), and forces every install offline:
./install.sh
nsauditor-ai license --pluginsThen carry the vulnerability data, which is separate and never ships with the product:
# connected host
nsauditor-ai feed bundle --from ./nvd-downloads --out feeds.json.gz \
--kev ./known_exploited_vulnerabilities.json --epss ./epss_scores.csv.gz
# isolated host — imports the feeds you downloaded, from a bundle you carried; restricted distribution
nsauditor-ai feed import --file feeds.json.gz --extras-dir ./stores
export NSAUDITOR_OFFLINE_ONLY=1
nsauditor-ai scan --host aws --env ./org.env --compliance soc2 --out ./outNSAUDITOR_OFFLINE_ONLY=1 refuses to start if an outbound path is also configured,
which rules out the opt-in RFC 3161 timestamping path inside the enclave. A host with no
sha256sum or shasum is refused rather than installed onto.
What is verified before the bundle ships. Every release re-builds it and runs a delivery
gate against those exact tarballs: all 44 declared production dependencies resolve from the carried
closure, 29 Enterprise plugins load, a store-backed scan returns findings from carried CVE data, and
the run makes zero network attempts. The gate never reads npm’s exit status —
every production dependency is an optionalDependency, so a NIC-down install of the
unvendored package exits 0 having installed almost nothing.
Verify the delivery yourself — not the installer. The installer’s exit code is the
one thing not to trust on an isolated host, and it is structural rather than a bug: every production
dependency is an optionalDependency, so npm skips an unfetchable one silently
and still exits 0. After install.sh, confirm what actually landed —
nsauditor-ai license --plugins must report the Enterprise plugins active, and a
require.resolve sweep of the declared production dependencies must reach 44 of 44
— the carrier shipped in EE 0.43.0 measured 44 of 44 at that release. The same sweep against the ordinary, non-bundled package on an isolated host reaches
0 of 44 — with npm still exiting 0. The full command is in the walkthrough.
# on a connected host — bundle the feeds you downloaded nsauditor-ai feed bundle --from ./nvd-downloads --out feeds.json.gz # carry it across, then on the isolated host ./install.sh # verifies checksums first, installs offline nsauditor-ai feed import --file feeds.json.gz export NSAUDITOR_OFFLINE_ONLY=1 nsauditor-ai scan --host aws --compliance soc2