Vornin
Start free

European vulnerability management your auditor can verify

Attack surface, web app, network, code and cloud security in one platform. Continuous detection. Remediation guided by risk. Audit evidence built in. For teams tired of the noise.

Start free scan See pricing

Continuous monitoring Audit evidence 14-day trial EU-hosted

Preview of Vornin web app with representative scan data

How it works

Scan. Resolve. Prove.

Use Vornin to run the whole vulnerability management lifecycle on one record: find exposure, drive remediation to a verified fix, and keep the evidence attached.

  1. 01

    Scan for vulnerabilities

    One scan covers your attack surface, web apps, APIs, networks, code, containers and cloud. Every finding dedupes to one record.

  2. 02

    Resolve what matters

    Get real-world risk ranking (EPSS, KEV), AI-reviewed findings with fix guidance, SLA tracking and auto escalation for missed deadlines. Scans auto close findings when an issue no longer appears.

  3. 03

    Prove the work

    Each finding maps to the controls it touches and carries a tamper-evident history for your auditor.

Built for the teams doing the work
IT & security teams Compliance teams Developers MSPs
Workflows

Prioritise findings, move fixes forward and prove the work

Discover assets, assign owners, track SLAs, verify fixes and report from the same finding record.

See what is exposed

Track known assets and catch new external exposure as it appears, down to forgotten subdomains and services.

Vornin target inventory with per-asset health scores and open findings

Know what needs attention

Rank persistent findings by real-world risk, affected assets and exploitability, on one record that survives every rescan.

Vornin vulnerability queue showing prioritised findings

Know when exposure changes

Daily sweeps flag new assets and alert you when known-exploited vulnerabilities (CISA KEV) match your confirmed stack.

Vornin attack surface: hosts tracked, open services and newly discovered assets

Turn security work into evidence

Findings map to their controls as you work, so remediation becomes audit evidence, not a separate write-up.

Vornin compliance overview: controls continuously tested and tamper-evident export Vornin compliance framework health across CIS Controls, DORA, GDPR, ISO 27001, NIS2 and other frameworks

Keep remediation moving

Give engineers plain-language remediation guidance, create issues in Jira, GitHub, GitLab or Azure DevOps, and keep status tied to the original finding.

Vornin AI remediation guidance: numbered upgrade steps Critical vulnerability

Keep stakeholders informed

Generate executive, technical and compliance reports from the same data, with no spreadsheet rebuild.

Vornin report configuration: type, scope and severity Generated Vornin vulnerability assessment report cover
See every capability
Coverage

Scan attack surface, web apps, APIs, networks, code, containers and cloud from one platform

Every finding enters the same queue, risk model and reporting workflow, regardless of where it was found.

Code / supply chain

Catch risk before release

Scan code, secrets and dependencies before release. SAST detects 95% of OWASP Benchmark vulnerabilities.

One findings queue
See all scan types
Audit evidence

Prove how each finding was handled

Show auditors the recorded lifecycle, relevant control mappings, supporting evidence and chain-verification result.

  1. Each finding maps to the framework controls it touches, automatically.

  2. Every status change writes to a per-tenant, tamper-evident chain sealed with SHA-256. Change a record after the fact and the chain breaks.

  3. Export any finding as an auditor pack: lifecycle, evidence and chain verification in one file.

Finding CVE-2025-31146
  1. Detected
  2. Triaged
  3. Assigned
  4. Fixed
  5. Verified
Chain verificationsha256:8f3a...b912 Verified
Mapped controlsNIS2DORAISO 27001
Exportauditor-pack-q2.zipLifecycle · evidence · verification

NIS2DORAISO 27001SOC 2PCI DSSHIPAAGDPRNIST 800-53CIS Controls

See all compliance mappings
Why Vornin

Vulnerability management
built for evidence, not just detection

Vornin combines rule-based detection with AI false-positive review, EU data residency and persistent finding history, turning scan findings into evidence for the compliance controls they touch.

Rules find it. AI checks it.

Defined scan checks produce every finding and rules set its priority, so the same input gives the same answer. AI reviews every code finding for false positives, writes context and fix guidance, and triages on request.

  • Up to 95% less container noise
  • Up to 4× more vulnerable dependencies found
European by design

Vornin is a European company under EU jurisdiction, not the US CLOUD Act. Your scan data, findings, and audit evidence are stored and processed in the EU, AI included. Sub-processors.

  • EU data residency
  • 9 compliance frameworks mapped
History that never resets

One persistent record for each finding reduces noise and improves lifecycle tracking. Ownership, remediation, verification and evidence remain attached from detection to closure.

  • 1 record across rescans
  • Tamper-evident audit trail
Start without a sales call

No demo required. Run a free scan and check transparent pricing before committing. Free includes web and network scanning, plus manual dependency and secret scans on one repository. Paid plans add advanced code and cloud scanning.

  • €0 to start
  • 3 self-serve plans
See how Vornin compares
FAQ

Get clear answers before you start

Understand scanning coverage, compliance scope, EU hosting, integrations and how signup works.

What is Vornin?Overview

Vornin is a European vulnerability management platform. It scans your external attack surface, web apps, APIs, networks, code, containers and cloud, drives every finding to a confirmed fix, and turns that work into tamper-evident audit evidence.

Is Vornin a vulnerability scanner?Model

Yes, Vornin includes scanning of multiple attack surfaces, from web apps, APIs and internal and external networks to code, containers and cloud, combining deterministic checks with context-aware AI to reduce noise. Each flaw keeps one record across scans and is ranked by real risk using layered threat intel. Each vulnerability is tracked through its lifecycle and closed automatically when a rescan confirms the fix. Audit evidence is built in. Security work is mapped to the technical controls it touches across nine frameworks, in a tamper-evident audit trail.

Does Vornin use AI?AI

Yes, AI is used to enhance detection and reduce noise. Defined scan checks find every issue. AI then reviews every code finding for false positives, writes plain-language context and fix guidance for every finding, and triages exploitability on request. AI cannot hallucinate findings. Priority stays rule-based, using the world's leading threat intelligence such as the Exploit Prediction Scoring System (EPSS) and the CISA KEV catalogue to measure real-world exploitability. All AI processing runs in the EU.

What can Vornin scan?Coverage

Your external attack surface, web apps and APIs, internal and external networks, source code with its secrets, dependencies and infrastructure-as-code, container images and Kubernetes, and cloud posture across AWS, Azure and Google Cloud. One platform, one findings list across every scan type.

Does Vornin make us NIS2, DORA or ISO 27001 compliant?Compliance

No tool can. Vornin maps findings to the technological controls it can test and gives you tamper-evident evidence of the work. Read the NIS2 compliance guide or the DORA compliance guide for what each framework actually requires. It reports control health honestly and never fakes a score for controls a scanner cannot check. Certifying your organisation stays your auditor's job.

Where is Vornin hosted?EU hosting

Vornin is a European company, a Danish ApS, with no US parent, and is not subject to the US CLOUD Act. Your vulnerability data, findings and audit evidence are stored in the EU under EU law, AI processing included.

Does Vornin keep a copy of our source code?Code access

No. Code scanning uses read-only access. Vornin reads what it needs to scan and removes the working checkout. Selected redacted source excerpts remain as finding evidence under your plan's retention policy. Scanning does not write to your repository.

Can Vornin work alongside our existing security tools?Integrations

Yes. Vornin's integrations import findings from other scanners, create issues in GitHub, GitLab, Azure DevOps and Jira, add PR comments in GitHub, GitLab and Azure DevOps, and export to CSV, SARIF and SBOM. Vornin does not need to replace your stack to run the lifecycle on top of it.

Do I need to talk to sales?Signup

No. Add your first target and scan in minutes. Free, Team and Business are self-serve with published pricing. Only Scale adds a short setup conversation.

More questions

Scan, resolve and prove.
Free to start.

Add a target and see Vornin turn scan findings into evidence.

Start free scan See pricing

No credit card required Read-only access EU-hosted