If your team still builds audit evidence by taking screenshots of a cloud console, there is a better version of that afternoon — and as of 15 September 2026 it has a 1.0 on it.
NSAuditor AI Enterprise 1.0.0 is live, alongside Community Edition 0.2.54 and agent-skill 0.2.52.
Most software reaches 1.0 by adding features. This one did it by making a promise.
Eight surfaces define how NSAuditor AI Enterprise produces compliance evidence — the finding shape and its markers, the MCP scan and query schemas, the report, attestation and rationale formats, the framework-mapping conventions, the Community peer floor, and the GRC push posture.
They have shipped unchanged since version 0.32.3. From 1.0 they are binding: a change to any of them is now a semver-major event.
Anyone who has wired a scanner into ticket routing, reporting or a GRC pipeline knows why that matters. A minor version lands, a field gets renamed, and a quarter of automation quietly stops meaning what it meant. Build an integration on NSAuditor today and 1.0 is the commitment that it will not shift under you.
One scan. Eight frameworks. No agents.
A single agentless, read-only scan across AWS, Azure and GCP produces eight framework-shaped evidence packs:
SOC 2 · HIPAA · NIST CSF 2.0 · PCI DSS v4.0.1 · ISO/IEC 27001:2022 · CIS Controls v8 · GDPR Article 32 · NIST SP 800-171 Rev 2
Each one cited in its own vocabulary, from one finding stream — instead of eight separate evidence-collection exercises. Read-only credentials are enforced in code, and the whole thing is local-first: your findings stay on your infrastructure, under your control.
The catalog: 29 Enterprise auditors (28 cloud auditors plus one Zero Trust posture check), 56 plugins overall.
The part your auditor will like
Every compliance report summary now carries findingsReceived and findingsRouted. An assessor holding nothing but the evidence pack can check the arithmetic from the pack alone.
No vendor portal. No callback to somebody’s cloud. No point where the reader has to take the tool’s word for it.
That is the argument for this product in one sentence: a number an auditor can verify is evidence; a number they have to take on faith is a conversation.
Who it is for
Internal security and compliance teams, vCISOs, MSSPs and consultancies carrying recurring client work — anyone who owns the evidence obligation between assessments rather than just during them. An air-gapped install path is available under restricted distribution for isolated networks.
Community Edition is MIT-licensed on npm as nsauditor-ai; Enterprise pairs with a Community floor of 0.2.49 or newer.
Coming next: delta and trend reports for Pro — what changed since your last scan — then identity-provider posture, Okta first. Releases move to one trio every two weeks.
See it: nsauditor.com/ai/enterprise · Sample evidence pack: nsauditor.com/ai/docs/sample-scan
