Vornin
Copenhagen, Denmark
What it is
Vornin is cloud-based vulnerability management software that brings scanning, prioritisation, remediation tracking and compliance evidence together in a finding record. It scans attack surfaces, web apps, APIs, networks, code, containers, Kubernetes and cloud environments. Each finding can retain an owner, SLA, discussion, scan evidence and verification history across scans. Its deterministic score weighs severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact and age. Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8 and NIST 800-53. It can import Nessus, OpenVAS, CSV and JSON results; paid plans add SARIF, SBOM and CSV exports. The free plan includes three targets and manual web and network scans. Paid plans start at €99 a month, and a 14-day Business-tier trial requires no credit card. Vornin says vulnerability data and audit evidence are stored in the EU, with sensitive fields encrypted at rest and connections using TLS 1.2 or higher.
For and against
For
- Scans code, cloud, networks, APIs and containers.
- Finding records preserve ownership and verification history.
- Maps findings to nine compliance frameworks.
- Free plan includes three targets and manual scans.
- 14-day Business trial requires no credit card.
Against
- Free plan is limited to three targets.
- Free plan uses manual scans.
- Paid plans start at €99 a month.
The verdict
Vornin combines broad vulnerability scanning with prioritisation, remediation records and compliance mapping. The free plan is limited, while its paid tiers add scheduled scans and other capabilities.
Who it suits
Vornin suits solo IT users and small teams that need vulnerability scanning and remediation tracking, as well as organisations preparing for compliance audits. Its Scale plan is described for large international organisations with multi-cloud estates or regulated audits.
Plans and prices
Free
3 targets · web and network scanning · 1 compliance framework preview · manual scans
Read 7 Oct 2026 · vornin.com
Team
5 targets included · 5 scheduled scans · unlimited users · all 9 frameworks
Read 7 Oct 2026 · vornin.com
Business
5 targets included · 15 scheduled scans · SAML SSO + SCIM · audit evidence packs
Read 7 Oct 2026 · vornin.com
Scale
5 targets included · unlimited scheduled scans · CI/CD build gates · white-label reports
Read 7 Oct 2026 · vornin.com
On the record
- Compliance
- Vornin maps findings to nine frameworks, including NIS2, DORA, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, CIS Controls v8, and NIST 800-53.vornin.com · read 7 Oct 2026
- Data security
- Vornin states that sensitive fields are encrypted at rest with AES-256-GCM and connections use TLS 1.2 or higher.vornin.com · read 7 Oct 2026
- Evidence integrity
- Finding events use a per-tenant SHA-256 hash chain, and Vornin says changing an event invalidates later events in the chain.vornin.com · read 7 Oct 2026
- Finding workflow
- Findings retain ownership, SLA, discussion, scan evidence, and verification history across scans.vornin.com · read 7 Oct 2026
- Hosting and jurisdiction
- Vornin says it is a Danish ApS and stores vulnerability data, findings, and audit evidence in the EU under EU law.vornin.com · read 7 Oct 2026
- Imports and exports
- Vornin can import Nessus, OpenVAS, CSV, and JSON results; paid plans include SARIF, SBOM, and CSV exports.vornin.com · read 7 Oct 2026
- Integrations
- The pricing page lists AWS, Azure, Google Cloud, Kubernetes, GitHub, GitLab, Azure DevOps, Slack, Teams, Jira, and Discord integrations, with availability varying by plan.vornin.com · read 7 Oct 2026
- Intended users
- The Team plan is described for solo IT and small teams, Business for organisations preparing for NIS2, DORA, or ISO 27001 audits, and Scale for large international organisations with multi-cloud estates or regulated audits.vornin.com · read 7 Oct 2026
- Prioritisation
- Its deterministic prioritisation score considers severity, EPSS, CISA KEV, known exploits, reachability, SLA urgency, compliance impact, and age.vornin.com · read 7 Oct 2026
- Product
- Vornin combines vulnerability scanning, risk-based prioritisation, remediation tracking, and technical compliance evidence in one finding record.vornin.com · read 7 Oct 2026
- Scan coverage
- It scans attack surfaces, web apps, APIs, networks, code, containers, Kubernetes, and cloud environments.vornin.com · read 7 Oct 2026
- Source code handling
- Code scanning uses read-only access, removes the working checkout after scanning, and retains selected redacted excerpts as finding evidence under the plan’s retention policy.vornin.com · read 7 Oct 2026
- Support and contact
- Vornin lists [email protected] for pricing questions and [email protected] for vulnerability disclosures, and says it responds to every security report within 48 hours.vornin.com · read 7 Oct 2026
- Trial
- The free trial provides 14 days of Business-tier access without a credit card; after it ends, the workspace moves to Free unless upgraded.vornin.com · read 7 Oct 2026
