Vulnsy Docs
AI Assistant

AI Assistant

Vulnsy's AI writing assistant helps you draft findings, executive summaries, and rewrites directly inside the report editor. Use Vulnsy's managed AI, your own API key, or a self-hosted model.

The AI writing assistant is built into the Vulnsy report editor. From any rich-text field you can ask it to draft a finding, write an executive summary, or improve, shorten, expand, or reformat what you have already written. It always works from the content you are editing, so the output fits the report in front of you.

AI is optional and off until an admin enables it. Enabling it is free and open to every workspace. Only using Vulnsy's own managed AI needs a paid add-on, and that add-on is included free during your trial.

Explore

What It Does

  • Draft findings from rough notes, with description, impact, remediation, and a suggested CVSS.
  • Write executive summaries aimed at a non-technical business audience.
  • Rewrite selected text, for example make it more formal, shorten it, expand it, fix grammar, or translate it.
  • Compose fresh content from a plain-language instruction, grounded in the field you are editing.

Every result is a draft you review before it goes into the report. Nothing is saved automatically.

Ways to Run It

Each workspace chooses one of three provider modes:

ModeWhose AICost
Managed (Vulnsy AI)Vulnsy's AI servicePaid add-on, free during the trial
Bring your own keyYour own OpenRouter API keyFree, you pay OpenRouter directly
Bring your own endpointA self-hosted, OpenAI-compatible modelFree, runs on your own infrastructure

See Provider Modes for how each one works and how to configure it.

Turning It On

  1. Go to Admin, then Organization Settings.
  2. Open the AI tab.
  3. Choose a provider mode and save.

Once enabled, the AI controls appear in the report editor for everyone in your workspace.

Your privacy is the priority. Managed AI routes only through zero-data-retention providers, prompts and generated text are never stored, and client identifiers are redacted from requests by default. See Privacy & Limits.

On this page