https://www.nsauditor.com/ai/ 2026-09-09 weekly 1.0 https://www.nsauditor.com/ai/pro/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/images/pro-exploit-first-card.png NSAuditor AI Pro — exploit-first vulnerability triage (product overview) The Pro overview covers exploit-first triage with CISA KEV and FIRST EPSS — free public feeds you download and point Pro at, failing closed when stale — CVE matching from detected service versions with fully offline support, the suppression workflow where findings are emitted unverified and you adjudicate, AI analysis on your own API keys, and risk-ranked reports built for one-click print to PDF. https://www.nsauditor.com/ai/videos/NSAuditor_AI_Pro.mp4 373 2026-08-31T20:34:00+00:00 yes no https://www.nsauditor.com/ai/enterprise/ 2026-09-16 weekly 0.95 https://www.nsauditor.com/ai/images/nsauditor-ai-enterprise-1-0-video-poster.jpg Network Security Audit Evidence, Not Screenshots — NSAuditor AI Enterprise 1.0 NSAuditor AI Enterprise walk-through, regenerated for EE 1.0.0 (2026-09-16): the Friday before the audit — a folder of console screenshots, a spreadsheet of unsigned exceptions, the same bucket mapped by hand to three frameworks, and an auditor asking how anyone knows a screenshot is real and taken during the audit period — then the same week after one read-only infrastructure scan mapped to eight compliance frameworks: SOC 2, HIPAA Security Rule §164.312, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32 as security-of-processing infrastructure substrate only, never GDPR compliance, and NIST SP 800-171 Rev 2 as evidence substrate for CMMC Level 2 preparation, never a CMMC certification. Six problems, before and after: evidence rebuilt once per framework, a posture scanner that copies your infrastructure map into a vendor's account, hundreds of findings with no way to tell exploited from theoretical (exploit-first triage joins CISA KEV and FIRST EPSS from stores you supply), unsigned risk acceptances, evidence with no trustworthy clock, and an integration built on a vendor whose output shape keeps moving. What 1.0 means: eight integration surfaces are frozen and semver-governed from 1.0.0, so a breaking change is a major version with a migration note — a stability promise, not a certification. 56 plugins in total (27 Community + 29 Enterprise, the Enterprise set being 28 cloud auditors across AWS, Azure and Google Cloud plus one network Zero Trust posture check); read-only credentials enforced in code; nothing goes to Nsasoft, with sixteen outbound paths enumerated in the product's own egress register — nine on by default, four carrying scan content, of which the NVD CVE lookup is on by default and yours to turn off and the other three go only to destinations you configure. Why an auditor should believe it: approvals checked against your own approver registry for approvers whose registry entry carries key material, a chain-of-custody envelope that re-hashes every artifact it names at verification, and a .tsr sidecar from the Time-Stamp Authority you name (opt-in via NSAUDITOR_TSA_URL; nothing is timestamped unless you name one) — all checkable with standard openssl, without trusting the vendor or the customer. It issues no certification and reaches no compliance verdict; the scope of an assessment stays your assertion. Offline use: distribution is restricted, and the container image is amd64-only; the bundle itself installs on native arm64 hosts too. Requires Community Edition 0.2.49 or newer. 8 min 43 s. https://www.nsauditor.com/ai/videos/NSAuditor_AI_Enterprise.mp4 523 2026-09-16T18:30:00+00:00 yes no https://www.nsauditor.com/ai/enterprise/technical-specifications/ 2026-09-09 weekly 0.8 https://www.nsauditor.com/ai/pricing/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/docs/ 2026-09-09 weekly 0.9 https://www.nsauditor.com/ai/docs/getting-started/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/docs/soc2/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/hipaa/ 2026-09-16 weekly 0.95 https://www.nsauditor.com/ai/images/nsauditor-ai-enterprise-1-0-video-poster.jpg Network Security Audit Evidence, Not Screenshots — NSAuditor AI Enterprise 1.0 NSAuditor AI Enterprise walk-through, regenerated for EE 1.0.0 (2026-09-16): the Friday before the audit — a folder of console screenshots, a spreadsheet of unsigned exceptions, the same bucket mapped by hand to three frameworks, and an auditor asking how anyone knows a screenshot is real and taken during the audit period — then the same week after one read-only infrastructure scan mapped to eight compliance frameworks: SOC 2, HIPAA Security Rule §164.312, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32 as security-of-processing infrastructure substrate only, never GDPR compliance, and NIST SP 800-171 Rev 2 as evidence substrate for CMMC Level 2 preparation, never a CMMC certification. Six problems, before and after: evidence rebuilt once per framework, a posture scanner that copies your infrastructure map into a vendor's account, hundreds of findings with no way to tell exploited from theoretical (exploit-first triage joins CISA KEV and FIRST EPSS from stores you supply), unsigned risk acceptances, evidence with no trustworthy clock, and an integration built on a vendor whose output shape keeps moving. What 1.0 means: eight integration surfaces are frozen and semver-governed from 1.0.0, so a breaking change is a major version with a migration note — a stability promise, not a certification. 56 plugins in total (27 Community + 29 Enterprise, the Enterprise set being 28 cloud auditors across AWS, Azure and Google Cloud plus one network Zero Trust posture check); read-only credentials enforced in code; nothing goes to Nsasoft, with sixteen outbound paths enumerated in the product's own egress register — nine on by default, four carrying scan content, of which the NVD CVE lookup is on by default and yours to turn off and the other three go only to destinations you configure. Why an auditor should believe it: approvals checked against your own approver registry for approvers whose registry entry carries key material, a chain-of-custody envelope that re-hashes every artifact it names at verification, and a .tsr sidecar from the Time-Stamp Authority you name (opt-in via NSAUDITOR_TSA_URL; nothing is timestamped unless you name one) — all checkable with standard openssl, without trusting the vendor or the customer. It issues no certification and reaches no compliance verdict; the scope of an assessment stays your assertion. Offline use: distribution is restricted, and the container image is amd64-only; the bundle itself installs on native arm64 hosts too. Requires Community Edition 0.2.49 or newer. 8 min 43 s. https://www.nsauditor.com/ai/videos/NSAuditor_AI_Enterprise.mp4 523 2026-09-16T18:30:00+00:00 yes no https://www.nsauditor.com/ai/docs/nist/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/pci/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/iso/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/cis/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/gdpr/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/800-171/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/grc/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/sample-scan/ 2026-09-09 monthly 0.85 https://www.nsauditor.com/ai/feeds/ai.xml 2026-09-09 weekly 0.5 https://www.nsauditor.com/ai/docs/NSAuditor-AI-Enterprise-Brochure.pdf 2026-08-18 monthly 0.7