Missing data is never good news
When an export carries no CVE references, many tools print an empty section that reads as a clean result. Scan Hub marks the CVE set Unknown and says why.
Scanner-agnostic · Evidence-led · KEV + EPSS ranked
Scan results in. Client‑ready vulnerability report out.
Drop in an export from your network, host or web vulnerability scanner. Scan Hub ranks every finding by real-world danger and writes the fix plan your client will sign off on.
14-day free trial of Core, no card needed. The pre-flight check needs no account at all. See sample reports →
▸ Ingest · nessus_export.xml
412 findings parsed
Hosts 63
Unreadable rows 0
CISA KEV match
9 known exploited
Ransomware-linked 3
Top EPSS 97.4%
◆ Fix plan
3 actions close 71% of risk
Grouped by fix · ticketed to your PSA
✓ Report ready
Acme Dental · Oct 2026
Branded PDF · 14 pages
Illustrative data. Real reports are generated from your own scan exports.
Reads exports from
- Tenable Nessus
- Qualys
- Rapid7
- Greenbone / OpenVAS
- Nuclei
- Burp Suite
- Microsoft Defender
- ConnectSecure
- + any CSV · XML · JSON
How it works
Three steps. No spreadsheets.
From raw export to a report your client can act on, without copy and paste.
Upload
Upload the export
CSV, XML or JSON from your network, host or web vulnerability scanner. No agents and no scanner credentials. The file is checked before you pay, and anything unreadable is named.
Rank
AI reads and ranks it
Every finding is checked against CISA's Known Exploited Vulnerabilities catalog, exploit likelihood and vendor fixes, then grouped into the fewest actions that close the most risk.
Deliver
Send, ticket and track
Hand the client a branded PDF, push the fixes to your PSA as tickets, and see what was fixed when the next scan arrives.
The report
Ranked by what attackers actually use.
Severity scores alone bury the dangerous items. Scan Hub puts findings on CISA’s Known Exploited Vulnerabilities (KEV) list and ransomware-linked findings first, then the rest in order with each finding’s EPSS exploit score beside it, plus an executive summary in plain English and the technical detail your engineers need underneath.
Open the sample reportsPriority order · fix from the top
- Band 1Known exploited, used in ransomwareFix first. From the CISA KEV catalog.
- Band 2Known exploitedAttackers are using it now.
- Band 3Critical CVE, CVSS 9.0 or higherSevere if reached.
- Band 4CVE rated medium or abovePlanned patching.
- Band 5No CVE, rated medium or aboveConfiguration and hardening.
- Band 6Low and informationalRecorded, not urgent.
Evidence first
AI that won't tell your client a gap is a clean bill of health.
Conflicts are kept, not merged
When one scan gives two different CVE sets for the same check, the disagreement is evidence. Scan Hub quarantines the finding instead of picking a value.
Every sentence traces to evidence
The AI writes only from facts the rules engine extracted. Every number in the report comes from the scan or a named intelligence source.
$ compare variant A vs variant BA CVE-2024-0001, CVE-2024-0002B CVE-2024-0009⚠ DATA-QUALITY STATE: QUARANTINED · both values kept · neither guessed · CVE set reported as Unknown
Supported scanners
Works with the vulnerability scanner you already use.
Support is defined by the export, not the scanner edition. For anything not listed, the free pre-flight check tells you whether Scan Hub can read it, and the AI maps the columns when the report is written. If it can’t, the credit is refunded.
- Tenable Nessus.nessus · CSV
- QualysXML · CSV
- Rapid7InsightVM · Nexpose
- Greenbone / OpenVASGreenbone XML
- NucleiJSON · JSONL
- Microsoft DefenderLive connection
- ConnectSecureLive connection
- Burp SuiteXML
- Other scannersCSV · XML · JSON
Who it's for
For whoever has to explain the scan.
MSPs
A report per client per month without the copy-paste, with fixes pushed straight into your PSA.
MSSPs
Exploit-aware priorities and overdue tracking across every client you watch.
Security consultants
Deliverables in your branding that read like you wrote them, in a fraction of the time.
Home and small office
Ran a scan and can't make sense of it? Get a clear list of what to fix, and how.
Free tools
Free security checks. No account needed.
Look up any CVE, test your email domain or find a domain’s mail servers in seconds, using public records only.
Sample reports
Sample vulnerability scan reports. Judge the output first.
Both samples are synthetic demonstration reports generated from test exports. They contain no customer data.
Tenable Nessus
Tenable Nessus report sample
.nessus XML export
Generated from a synthetic three-host Nessus export that carries CVE references. It opens with an executive summary and the decisions leadership needs to make, ranks the findings into priority bands using CISA KEV and EPSS data, explains what that public threat data adds, then sets out a remediation plan and what the scan cannot show.
Synthetic demonstration report generated from a test export. Not a customer report.
Download sample PDF (Tenable Nessus)
Greenbone / OpenVAS
Greenbone / OpenVAS report sample
Greenbone Community Edition XML export
Generated from a Greenbone Community Edition scan of Metasploitable 2, a deliberately vulnerable lab machine. The export leaves out most CVE references, so the report fills them in from Greenbone's own check-to-CVE list, says so, and then checks them against CISA KEV and EPSS. Findings still without a CVE are marked unknown, not clean.
Demonstration report generated from a lab scan. Not a customer report.
Download sample PDF (Greenbone / OpenVAS)Guides
Free vulnerability reporting guides.
Pricing
Per report, or per month.
Every new account gets a 14-day free trial of Core, with no card and no automatic conversion.
Starter
$49 / month
or $490 / year
- 10 reports per month
- 1 user
Core
Trial plan$99 / month
or $990 / year
- 25 reports per month
- Up to 3 team members
Growth
$199 / month
or $1,990 / year
- 60 reports per month
- Up to 10 team members
Scale
$299 / month
or $2,990 / year
- 150 reports per month
- Unlimited team members
Pay-as-you-go report: $9 per report, no subscription. Full pricing →
Security and data
Your clients' data, handled like it matters.
Uploads are used only to produce your report. They are never sold, never shared for advertising and never used to train AI models. Google Ads and Reddit Ads measurement load only if you accept advertising cookies.
MFA for everyone
Every Scan Hub account signs in with a second factor.
Names stay private
Host names, addresses and emails are swapped for placeholders before anything reaches the AI.
Named providers
Reports are written with Anthropic's Claude and stored with Supabase. Both are named in our privacy policy, and neither trains on your data.
Walled-off data
Each organisation's data is isolated from every other at the database level.
Try it on your last scan.
Run the free pre-flight check and see what your export supports.