Is Violet a replacement for our current pentest tools, or a complement?

Violet complements. We import findings from Burp, Nessus, OWASP ZAP, Nuclei and internal tooling via API. The AI layer clusters, deduplicates and maps to controls. Your existing testing stack stays intact.

How does Violet handle multi-tenant data isolation?

Schema-level isolation in Postgres with Row-Level Security by default. Each tenant has its own logical boundary; cross-tenant access is impossible, not unlikely. EU-hosted with per-tenant encryption at rest.

Which compliance frameworks does Violet support natively?

NIS2, DORA, ENS, ISO 27001, SOC 2 and PCI-DSS out of the box. Each finding auto-maps to the applicable article or control, with versioned evidence ready for auditor review.

Is Violet GDPR compliant for EU clients?

Yes. Data is stored exclusively in EU regions, a signable DPA is provided, processing is logged per tenant, and per-country data residency is supported. No third-country transfers without explicit consent.

Can we white-label Violet for our own customers?

Yes, on Studio and Enterprise plans. Per-tenant logo, palette and custom domain. Your client never sees the Violet brand in reports, dashboards or notification emails.

How does Violet's AI ensure auditor-grade evidence?

Every AI-generated artefact is signed, dated and referenced back to the original finding and mapped control. Full traceability, no unreviewed hallucinations. A human can review and sign before export.

What's the typical onboarding time?

One day for small tenants (import tools, set branding, first report). One to two weeks for MSSPs with multiple tenants and custom workflows. Dedicated onboarding on Studio and Enterprise plans.

AI-FIRST

MSSP-NATIVE

MULTI-TENANT

Audit once.
Prove it forever.

The MSSP platform that turns a week of pentest reporting into a five-minute publish — with NIS2, DORA and ENS evidence attached.

Book a demo → See the platform →

Built with European MSSPs

CYFOR

NORTHWAVE

KUDELSKI

S21SEC

NORTHGUARD

SOC 2 Type II in progress

HIGH

CVSS 8.2

SQL Injection · Customer Portal

Unparameterized query in /api/v2/orders/search. Affects 247 endpoints.

✓ NIS2 Art. 21(2)(e)

✓ DORA RTS Art. 9

✓ ENS Op.exp.7

violet — pentest scan

$ violet scan --tenant=acme-mssp

▸ scanning 247 endpoints...

▸ 12 findings clustered, 4 critical

✔ mapped to 23 controls (NIS2, DORA, ENS)

Compliance Coverage

NIS2

87%

DORA

76%

ENS

92%

ISO 27001

68%

SOC 2

54%

CYFOR NORTHWAVE KUDELSKI S21SEC NORTHGUARD BLUEVOYANT TELEFÓNICA TECH DEEPCYBER CYFOR NORTHWAVE KUDELSKI S21SEC NORTHGUARD BLUEVOYANT TELEFÓNICA TECH DEEPCYBER

Platform

One platform. The whole audit lifecycle.

From scope to signed evidence pack — every step orchestrated, every artefact captured, every finding wired to a control.

Discover

Map every asset, endpoint and shadow service in scope.

$ violet scan --tenant acme

▸ found 12 critical findings

✔ mapped to NIS2 Art. 21(2)(e)

Test

Run pentests with co-pilot guidance and integrated tooling.

Find

AI clusters findings, kills duplicates, ranks by impact.

Report

AI drafts the executive narrative in your house style.

Prove

Findings auto-map to NIS2, DORA and ENS evidence packs.

✓NIS2

✓DORA

✓ENS

○ISO 27001

Discover

Map every asset, endpoint and shadow service in scope.

$ violet scan --tenant acme

▸ found 12 critical findings

✔ mapped to NIS2 Art. 21(2)(e)

Test

Run pentests with co-pilot guidance and integrated tooling.

Find

AI clusters findings, kills duplicates, ranks by impact.

Report

AI drafts the executive narrative in your house style.

Prove

Findings auto-map to NIS2, DORA and ENS evidence packs.

Discover

Map every asset, endpoint and shadow service in scope.

Test

Run pentests with co-pilot guidance and integrated tooling.

Find

AI clusters findings, kills duplicates, ranks by impact.

Report

AI drafts the executive narrative in your house style.

Prove

Findings auto-map to NIS2, DORA and ENS evidence packs.

AI is not a feature. It's the spine of the platform.

Four capabilities, one orchestration layer. Wired end-to-end, not bolted on after launch.

AI Drafting

Findings become executive prose, tone-matched to your house style and tenant brand.

AI Remediation

Code-ready fixes per finding. Patch suggestions ship straight to your ticket queue.

AI Compliance Mapping

Each finding lands against NIS2, DORA and ENS controls. Auditor-ready, not auditor-adjacent.

AI Evidence Generation

Reports, screenshots, SBOMs and attestations bundled per audit. Signed, dated, exportable.

AI Drafting Output

$ violet scan --tenant acme

▸ found 12 critical findings

✔ mapped to NIS2 Art. 21(2)(e)

Platform Config

# violet.config.yml

tenant: acme-corp

frameworks: [nis2, dora]

auto-evidence: true

Finding Confidence

FINDINGS BY SEVERITY

[Interactive diagram - tap nodes for details]

AI Drafting: Findings become executive prose, tone-matched to your house style and tenant brand.

AI Remediation: Code-ready fixes per finding. Patch suggestions ship straight to your ticket queue.

AI Compliance Mapping: Each finding lands against NIS2, DORA and ENS controls. Auditor-ready, not auditor-adjacent.

AI Evidence Generation: Reports, screenshots, SBOMs and attestations bundled per audit. Signed, dated, exportable.

AI Capabilities

$ violet scan --tenant acme

▸ found 12 critical findings

✔ mapped to NIS2 Art. 21(2)(e)

AI Architecture

AI Drafting

Findings become executive prose, tone-matched to your house style and tenant brand.

AI Remediation

Code-ready fixes per finding. Patch suggestions ship straight to your ticket queue.

AI Compliance Mapping

Each finding lands against NIS2, DORA and ENS controls. Auditor-ready, not auditor-adjacent.

AI Evidence Generation

Reports, screenshots, SBOMs and attestations bundled per audit. Signed, dated, exportable.

$ violet scan --tenant acme

▸ found 12 critical findings

✔ mapped to NIS2 Art. 21(2)(e)

Every finding, mapped to a control.

Stop cross-referencing CVEs against framework articles in spreadsheets. We map the moment a finding lands.

SQL Injection · Customer Portal

High 8.2

NIS2 Art. 21(2)(e)

DORA RTS

ENS Op.exp.7

Framework	Mapped
NIS2 21(2)(e)	100%
DORA RTS	94%
ENS Op7	88%

NIS2

EU directive, 2026 enforcement deadline

FRAMEWORK COVERAGE65%

DORA

Digital operational resilience act

✓ Auto-evidence

ENS

Spanish national security scheme

✓ Audit-ready

ISO 27001

Information security management

✓ Auto-mapped

SOC 2

Service organization control

✓ Auto-mapped

PCI-DSS

Payment card industry standard

✓ Auto-mapped

One platform. Every client. Every brand.

Multi-tenant from the database up. Spin up a new tenant in 60 seconds — own logo, own domain, own audit history. Nothing crosses the boundary.

ACME Cyber

Recent Audits

Compliance Status

100%

Active Findings

Next Review

Mar 15, 2026

# violet.config.yml

tenant: acme-corp

frameworks: [nis2, dora]

auto-evidence: true

White-label per tenant

Logo, palette, custom domain. Your client never sees the word Violet.

Schema-level isolation

Hard tenant boundaries. RLS by default. Cross-tenant access is impossible, not unlikely.

Per-tenant billing

Bill clients on your terms. We bill you per tenant, per month.

●

○

●

○

●

Honest pricing. No seat tax.

Pay per tenant, not per user. No compliance surcharge. Cancel anytime, export everything.

Solo

For independent consultants and small teams.

Up to 10 tenants
AI drafting and remediation
NIS2, DORA, ENS mapping
Email support

Studio

For growing MSSPs scaling delivery.

Up to 50 tenants
Everything in Solo
White-label per tenant
Priority support and SLA

Enterprise

For MSSPs at scale and regulated industries.

Unlimited tenants
On-prem or private cloud
Dedicated CSM and 24/7 support
Custom contracts and DPAs

Audit once. Prove it forever.

SQL Injection · Customer Portal

One platform. The whole audit lifecycle.

Discover

Test

Find

Report

Prove

Discover

Test

Find

Report

Prove

Discover

Test

Find

Report

Prove

AI is not a feature. It's the spine of the platform.

AI Drafting

AI Remediation

AI Compliance Mapping

AI Evidence Generation

AI Drafting Output

Platform Config

Finding Confidence

AI Capabilities

AI Architecture

AI Drafting

AI Remediation

AI Compliance Mapping

AI Evidence Generation

Every finding, mapped to a control.

NIS2

DORA

ENS

ISO 27001

SOC 2

PCI-DSS

One platform. Every client. Every brand.

White-label per tenant

Schema-level isolation

Per-tenant billing

Honest pricing. No seat tax.

Solo

Studio

Enterprise

Audit once.
Prove it forever.