# NSAuditor AI

An open-source, AI-assisted network security scanner that runs 27 plugins to find and prioritize vulnerabilities, map them to CVEs and MITRE ATT&CK, and track changes across scans, entirely on the user's own machine.

NSAuditor AI is the open-source core of a network security audit platform built by Nsasoft. It orchestrates 27 specialized scanning plugins against target hosts, combines their results, and can optionally produce AI-generated vulnerability reports, all running locally with no telemetry or phone-home endpoint; AI enrichment is opt-in and uses the user's own API keys, including a fully local option through Ollama.

CVE correlation queries the public NIST NVD API by default, but can be set to use a local NVD store for fully offline operation, which then reports an explicit coverage gap rather than a silent clean result. A comparison feature can diff two scan runs to show what changed, what is newly resolved, and what could not be compared and why, since it treats a finding as needing an explicit reason rather than an assumed fix; run records are chained with SHA-256 hashes so a tampered baseline refuses to produce a comparison.

It ships as a cross-platform CLI tool and integrates with security workflows through SARIF output, continuous monitoring, and MCP.

Website: https://www.nsauditor.com/ai/