Vornin

What Vornin is

Vornin is a cloud vulnerability management product that brings scanning, risk prioritisation, remediation tracking, and compliance evidence together around each finding. It scans attack surfaces, web applications, APIs, networks, code repositories, containers, Kubernetes clusters, and cloud environments. Supported targets also include hostnames, IP addresses and ranges, and URLs; authenticated and continuous scanning are supported. Findings preserve ownership, SLA details, discussion, scan evidence, and verification history across scans. A deterministic score weighs severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age to help teams decide what to address first.

Vornin maps findings to nine frameworks: NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53. It imports Nessus, OpenVAS, CSV, and JSON results; paid plans add SARIF, SBOM, and CSV exports. Integrations listed include AWS, Azure, Google Cloud, Kubernetes, GitHub, GitLab, Azure DevOps, Slack, Teams, Jira, and Discord, with availability depending on plan. Vornin says vulnerability data, findings, and audit evidence are stored in the EU under EU law. It also describes encryption for sensitive fields and connections, plus a per-tenant SHA-256 hash chain for finding events. Plans start with a free tier, and a 14-day Business-tier trial is available without a credit card.

Who it suits

Vornin suits solo IT users and small teams that need scanning and remediation workflows, as well as organisations preparing for NIS2, DORA, or ISO 27001 audits. Its Scale plan is described for large international organisations managing multi-cloud estates or regulated audits.

Limits

The Free plan provides three targets, web and network scanning, manual scans, and a preview of one compliance framework. Team, the least expensive paid plan, costs €99 a month and includes five targets and five scheduled scans.

Getting started

1. Open https://vornin.com/.
2. Start with the Free plan or use the 14-day Business-tier trial, which requires no credit card.
3. Add supported targets such as hostnames, URLs, APIs, repositories, or cloud accounts.
4. Run manual scans on Free, or use scheduled scans on a paid plan.
5. Connect available integrations or import Nessus, OpenVAS, CSV, or JSON results.

Verdict

Choose Vornin if your team wants scanning, prioritisation, remediation tracking, and compliance evidence connected to findings. Its free tier is limited to three targets and manual scans; teams needing scheduled scans or all nine frameworks should consider a paid plan.