NSAuditor AI
An open-source, AI-assisted network security scanner that runs 27 plugins to find and prioritize vulnerabilities, map them to CVEs and MITRE ATT&CK, and track changes across scans, entirely on the user's own machine.
NSAuditor AI is the open-source core of a network security audit platform built by Nsasoft. It orchestrates 27 specialized scanning plugins against target hosts, combines their results, and can optionally produce AI-generated vulnerability reports, all running locally with no telemetry or phone-home endpoint; AI enrichment is opt-in and uses the user's own API keys, including a fully local option through Ollama.
CVE correlation queries the public NIST NVD API by default, but can be set to use a local NVD store for fully offline operation, which then reports an explicit coverage gap rather than a silent clean result. A comparison feature can diff two scan runs to show what changed, what is newly resolved, and what could not be compared and why, since it treats a finding as needing an explicit reason rather than an assumed fix; run records are chained with SHA-256 hashes so a tampered baseline refuses to produce a comparison.
It ships as a cross-platform CLI tool and integrates with security workflows through SARIF output, continuous monitoring, and MCP.