Auditon
From $250/moActively maintained
not read yet
Use
- For
- Small security teams running recurring web application scans to prepare ISO 27001 or SOC 2 audit evidence.
- Price
- From $250/mopricing page, read Oct 27, 2026
- Activity
- Actively maintainedsite updated 3 weeks ago
- Company
- Auditon Labs Ltdprivacy policy
- Used for
- Schedule recurring scans of web applications and their services
- Track time to fix and SLA adherence for open findings
- Prepare scan history and accepted risks for auditor review
- Has an MCP server (1 in the registry)public registry →
- HeadquartersSofia, Bulgariaper their About page
- Run byAuditon Labs Ltdprivacy policy ↗
- Certifications they stateISO 27001trust center ↗
- Trust centertheir owntrust center ↗
- Privacy policy updated2026-10-09privacy policy ↗
- Security contactsecurity.txt
These are Auditon's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverco.auditon/assessmentsverified in the MCP registry
- Stateanswers, 6 toolschecked 2026-10-27
- Address to connectauditon.co/mcp
- MCP docsauditon.co/mcp-security-scan-results.htmlthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Autonomous pentesting, continuous monitoringMCP · sign-in
Scans web apps, networks and cloud for vulnerabilities, then exploits them where supported to prove risk, with reports and an autonomous pentest agent.
107kActiveFrom $96/mo2017 - #2
VantaMCP · sign-in
Automates compliance evidence collection and audit preparation across SOC 2, HIPAA, ISO 27001, and other frameworks.
71.1kActiveContact sales - #3
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #4
ScytaleMCP · sign-in
Automates compliance programs for SOC 2, ISO 27001, HIPAA and GDPR by collecting evidence, monitoring controls and tracking audit readiness.
7.5kActiveContact sales2021 - #5
Strike Graph AI
Runs security compliance programs for SOC 2, ISO 27001 and other frameworks, collecting control evidence from connected systems for audits.
5.6kActiveFrom $21,500/yr2020 - #6
Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActiveFree plan
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Auditon for?
Sign in to leave a noteWhat is Auditon?
Runs scheduled vulnerability scans on web apps and their services and tracks each finding through to a recorded fix. It is listed in the Atlas under Security and made by Auditon Labs Ltd.
Who is Auditon for?
Small security teams running recurring web application scans to prepare ISO 27001 or SOC 2 audit evidence.
How much does Auditon cost?
Paid plans start at $250/mo, per Auditon's pricing page on 2026-10-27.
Is Auditon free?
No. Its pricing page showed no free plan on 2026-10-27.
Do people use Auditon?
Little sign of use.
Is Auditon still maintained?
Actively maintained: site updated 3 weeks ago.
Who owns Auditon?
Auditon is run by Auditon Labs Ltd, per its privacy policy (2026-10-27).
Is Auditon safe?
We do not audit vendors. What Auditon publishes, read 2026-10-27: ISO 27001 stated on its trust center.
What are alternatives to Auditon?
In Security, by use: Autonomous pentesting, continuous monitoring, Vanta, Snyk, Scytale, Strike Graph AI, Fluid Attacks.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.