Tell Clients the Week Their Posture Slipped: NSAuditor AI Enterprise 2.0.0 for MSPs and Consultants

Your clients do not want a compliance report once a quarter. They want to know the week something slipped, and they want to hear it from you first. NSAuditor AI Enterprise 2.0.0 and Community Edition 1.0.0, published on 15 October 2026, turn each recurring one-shot compliance scan into a change report, and they can deliver that change straight into the channel your team already watches.

Every scan answers: what changed?

Each one-shot Enterprise compliance scan now writes a drift file beside its evidence pack. It lists the controls that went to fail or to pass, the controls that lost measurement, and the violations that are new or cleared. Run it per client and you have a ready answer to “did anything get worse since last week?” for every framework you report on.

Include the port scanner in the scans you compare, and a violation is listed as cleared only when the scan looked for it and it was gone. Where a scan could not measure something, the drift file says so, with the reason.

Alerts in Slack or Teams, per client

Point --notify-webhook at a client channel and choose --notify-format slack or teams. The drift arrives when a control goes to fail or loses measurement, when a new violation reaches the severity you set with --notify-severity, or when the drift could not be compared with the previous run. The payload is minimal by default and goes only to the URL you supply.

Safer to run, easier to explain

  • A scan pinned to what its host check approved. From Community Edition 1.0.0, a scan connects only to the addresses its host check resolved, on the command line and through the MCP server.
  • AI summaries without account IDs. AWS account IDs leave the AI payload as [ACCOUNT_ID], and the exact system prompt is saved beside the payload. You can show a client precisely what an AI service saw.
  • Weak certificates count. Weak-key and weak-signature certificate findings now fail the certificate control in SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO 27001 and CIS Controls v8.

One scan, eight frameworks, nothing sent to us

One read-only scan across AWS, Azure and GCP produces evidence for SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32 and NIST SP 800-171 Rev 2. Your clients’ scan data never goes to Nsasoft.

Get it

2.0 is a major release: Node.js 24 is the supported runtime, and Enterprise 2.0.0 requires Community Edition 1.0.0. Upgrade both together with npm i -g nsauditor-ai@1.0.0 @nsasoft/nsauditor-ai-ee@2.0.0. Enterprise starts at $2,000 per year: nsauditor.com/ai/enterprise. Pro client delta reports start at $39 per month billed annually: nsauditor.com/ai/pro.