https://www.nsauditor.com/ai/ 2026-09-09 weekly 1.0 https://www.nsauditor.com/ai/pro/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/images/pro-exploit-first-card.png NSAuditor AI Pro — exploit-first vulnerability triage (product overview) The Pro overview covers exploit-first triage with CISA KEV and FIRST EPSS — free public feeds you download and point Pro at, failing closed when stale — CVE matching from detected service versions with fully offline support, the suppression workflow where findings are emitted unverified and you adjudicate, AI analysis on your own API keys, and risk-ranked reports built for one-click print to PDF. https://www.nsauditor.com/ai/videos/NSAuditor_AI_Pro.mp4 373 2026-08-31T20:34:00+00:00 yes no https://www.nsauditor.com/ai/enterprise/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/images/soc2-hipaa-pci-iso-cis-gdpr-nist-csf2-sp800-171.jpeg NSAuditor AI Enterprise — Verifiable Beats Trusted: One Scan, Eight Compliance Frameworks Across AWS, Azure & GCP NSAuditor AI Enterprise walk-through, regenerated on EE 0.46.0 (2026-09-09): one infrastructure scan mapped to eight compliance frameworks — SOC 2, HIPAA Security Rule §164.312, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32 as security-of-processing infrastructure substrate only, never GDPR compliance, and NIST SP 800-171 Rev 2 as evidence substrate for CMMC Level 2 preparation, never a CMMC certification. It opens on the screenshot problem — an auditor asking how anyone knows a screenshot is real and taken during the audit period — then walks the five problems one scan solves: evidence rebuilt once per framework, a posture scanner that copies your infrastructure map into a vendor's account, hundreds of findings with no way to tell exploited from theoretical, unsigned risk acceptances, and evidence with no trustworthy clock. 56 plugins in total (27 Community + 29 Enterprise, the Enterprise set being 28 cloud auditors across AWS, Azure and Google Cloud plus one network Zero Trust posture check); read-only credentials enforced in code; nothing goes to Nsasoft, with sixteen outbound paths enumerated in the product's own egress register. Why an auditor should believe it: approvals checked against your own approver registry for approvers whose registry entry carries key material, a chain-of-custody envelope that re-hashes every artifact it names at verification, and a .tsr sidecar from the Time-Stamp Authority you name (opt-in via NSAUDITOR_TSA_URL; nothing is timestamped unless you name one) — all checkable with standard openssl, without trusting the vendor or the customer. Exploit-first triage joins CISA KEV and FIRST EPSS from stores you supply. It issues no certification and reaches no compliance verdict; the scope of an assessment stays your assertion. Requires Community Edition 0.2.49 or newer. 8 min 06 s. https://www.nsauditor.com/ai/videos/NSAuditor_AI_Enterprise.mp4 486 2026-09-09T22:00:00+00:00 yes no https://www.nsauditor.com/ai/images/unified-compliance-soc2-hipaa-poster.jpg Unified Compliance: SOC 2 + HIPAA in One Scan — NSAuditor AI Enterprise Short-form explainer of the NSAuditor AI Enterprise dual-framework workflow. HIPAA Security Rule §164.312 Technical Safeguards is supported alongside SOC 2, and a single scan produces both evidence packs. Zero BAA required — the scanner reads infrastructure configuration, never ePHI. https://www.nsauditor.com/ai/videos/Unified_Compliance.mp4 2026-05-21T14:00:00+00:00 yes no https://www.nsauditor.com/ai/enterprise/technical-specifications/ 2026-09-09 weekly 0.8 https://www.nsauditor.com/ai/pricing/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/docs/ 2026-09-09 weekly 0.9 https://www.nsauditor.com/ai/docs/getting-started/ 2026-09-09 monthly 0.9 https://www.nsauditor.com/ai/docs/soc2/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/hipaa/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/images/unified-compliance-soc2-hipaa-poster.jpg Unified Compliance: SOC 2 + HIPAA in One Scan — NSAuditor AI Enterprise NSAuditor AI Enterprise HIPAA explainer — Security Rule §164.312 Technical Safeguards supported alongside SOC 2, in a dual-framework one-scan workflow. Zero BAA architecture: the scanner reads infrastructure configuration, never ePHI. https://www.nsauditor.com/ai/videos/Unified_Compliance.mp4 2026-05-21T14:00:00+00:00 yes no https://www.nsauditor.com/ai/docs/nist/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/pci/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/iso/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/cis/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/gdpr/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/800-171/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/grc/ 2026-09-09 weekly 0.95 https://www.nsauditor.com/ai/docs/sample-scan/ 2026-09-09 monthly 0.85 https://www.nsauditor.com/ai/feeds/ai.xml 2026-09-09 weekly 0.5 https://www.nsauditor.com/ai/docs/NSAuditor-AI-Enterprise-Brochure.pdf 2026-08-18 monthly 0.7