When an assessor asks how you know your cloud inventory was complete, an empty result is only an answer if the scan could see. NSAuditor AI Enterprise 2.1.0, published on 26 October 2026 with Community Edition 1.1.0, records the GCP instance, Azure VM and EC2 inventories a scan could not read in full as evidence gaps, and it runs on the October 2026 Node.js security release.
An unread inventory is a gap, not an empty project
When the GCP, Azure or EC2 auditor cannot read its instance or VM inventory in full, Enterprise 2.1.0 records an evidence gap that fails CIS v8 Safeguards 4.1, 4.2 and 4.6. The CIS report names which cloud’s inventory is short and why, so your hardened-image census shows exactly what it covered.
Less noise from regions you never enabled
Wherever the account’s enabled regions can be read, an all-regions AWS scan walks the regions your account has enabled, and a listed region your account has not enabled is recorded as not enabled, so the CloudTrail check raises no missing-trails finding for that region. For MSPs whose client accounts leave some regions disabled by policy, that means cleaner reports and fewer tickets that lead nowhere.
Every provider reads true
An Azure scan with no subscription id, and a GCP scan with no project or no loadable credentials, now report the plugin down with the cause, so your report shows exactly which providers were audited.
Better scans from Claude
Teams that drive scans from Claude through the MCP server in Community Edition 1.1.0 get three practical upgrades:
- A host scan with a time limit. A host scan through the MCP server stops at a total time limit, 50 seconds by default, and names the plugins it did not run.
- Responses you can check later. With
NSA_MCP_RESPONSE_DIRset, each saved response keeps its request beside it, andnsauditor-ai mcp verify-callchecks both. - Titles that say when there is more. A
scan_cloudCRITICAL, HIGH or evidence-gap title says when its finding holds more than it shows, and points you toget_findingsfor the rest (cloud scans need an Enterprise license).
One scan, eight frameworks
One read-only Enterprise scan produces evidence for SOC 2, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8, GDPR Article 32 and NIST SP 800-171 Rev 2. Your scan data never goes to Nsasoft.
Get it
Enterprise 2.1.0 runs on Node.js 24.22.1 or newer, the October 2026 Node.js security release for the 24 line, and installs with Community 1.1.0: npm i -g nsauditor-ai@1.1.0 @nsasoft/nsauditor-ai-ee@2.1.0. Enterprise starts at $2,000 per year: nsauditor.com/ai/enterprise. Pro starts at $39 per month billed annually: nsauditor.com/ai/pro. Community Edition is free and MIT-licensed on npm: npm i -g nsauditor-ai.
