Nullsid turns raw scanner output into client-ready reports — ingest findings, correlate, score, and draft — entirely on your hardware. Local inference by default. No cloud, no API keys, no data leaving your network.
Whether you're a consulting firm under NDA or an internal security team under policy, your findings — AD topology, credentials, vulnerabilities — are regulated. Yet every "AI security tool" wants you to upload them to its API.
"Upload your findings to our API and let our AI handle the rest." Client data leaves your machine. You hand NDA-protected material to a third party with no control over retention, training, or breach exposure. POST /api/analyze is a compliance liability.
"Autonomous AI pentesting, in our cloud, at enterprise scale." $450/month or an enterprise contract. No local option, no flat pricing, no self-hosting. Your tooling lives in someone else's infrastructure, phoning home to their servers.
Nullsid is self-hosted, not a cloud API. Local inference is the default, not an afterthought. Bring your own key for frontier models if you want — it's never required, and nothing leaves your network unless you say so.
Import from Burp, Nmap, Nuclei, Nessus, Semgrep, or plain notes. Nullsid parses, deduplicates, correlates, scores CVSS 3.1, drafts descriptions and remediation, and generates an executive summary — then exports a branded PDF or DOCX. All offline, all local.
# Supported parsers Burp → XML import Nmap → XML output Nuclei → JSON Nessus → .nessus Semgrep → SARIF Notes → Markdown / plain ───────────────────────── Output → PDF / DOCX Templates → Custom branding Inference → Llama-class (local)
A built-in network monitor shows real-time outbound traffic during processing. Export a packet capture as proof for your client: their data never left the machine. Every AI capability — reporting, validation, assessment — runs on your hardware. No cloud, no calls home.
Nullsid — network monitor ━━━━━━━━━━━━━━━━━━━━━━━━━━━ Outbound 0 B/s Inbound 0 B/s (idle) DNS queries 0 API calls 0 ━━━━━━━━━━━━━━━━━━━━━━━━━━━ STATUS: PROVABLY LOCAL → export .pcap proof for client
Three steps, all on your machine. Nullsid does the mechanical work — parsing, correlation, first-draft prose — and hands you a report to review, not a black box to trust.
Load output from Burp, Nmap, Nuclei, Nessus, or Semgrep — or paste plain notes. Nullsid normalizes everything into one findings model and deduplicates across tools.
The assistant correlates related findings, scores CVSS 3.1, and drafts descriptions, remediation, and an executive summary. Every draft is editable inline — you stay in control.
Generate a branded PDF or DOCX from your own template. Attach a packet capture proving the engagement data never left your hardware.
Nullsid is in early access. Join the waitlist for local, self-hosted AI report generation. No spam, no cloud, no identity required.