VulnPilot — Quick start

VulnPilot is a Python CLI. It requires Python 3.10 or later and pip.

Install

pip install vulnpilot

Download threat intelligence feeds

VulnPilot uses two public datasets: the CISA Known Exploited Vulnerabilities catalog and the FIRST Exploit Prediction Scoring System. Download them once; they cache locally.

vulnpilot update-feeds

Analyze a Nessus export

Export your Nessus scan as a CSV file and run:

vulnpilot analyze scan.csv

VulnPilot outputs a prioritized findings table ranked by composite risk score, a summary of KEV matches and EPSS-high findings, and the top 10 hosts by aggregate risk.

Generate audit evidence

vulnpilot analyze scan.csv --evidence soc2
vulnpilot analyze scan.csv --evidence iso27001

See Audit evidence packs for details.