# NexusVoid AI > Index of the NexusVoid AI documentation. ## Documentation - [NexusVoid AI](https://nexusvoidai.documentationai.com/introduction.md): Your autonomous CISO. NexusVoid runs your security program, finding and fixing what is exposed, governing the company around it and proving it, so compliance comes out as a by-product of work that is actually done. - [Argus, Supply Chain Security](https://nexusvoidai.documentationai.com/argus.md): Argus scans your repositories for vulnerable dependencies, hardcoded secrets, insecure code and misconfigured infrastructure, reviews every pull request, and can block a merge until the findings are resolved. - [Quick Start](https://nexusvoidai.documentationai.com/quickstart.md): Connect a repository, run your first scan, and read your first findings. - [Concepts](https://nexusvoidai.documentationai.com/concepts.md): Severity vs priority, reachability, credits, and the vocabulary Argus uses. - [Scanning](https://nexusvoidai.documentationai.com/scanning.md): What each scanner looks for, how scans are triggered, and what a scan costs. - [Supply Chain](https://nexusvoidai.documentationai.com/supply-chain.md): Dependencies, BOMs, API inventory and the third-party services your code calls. - [Issues & Remediation](https://nexusvoidai.documentationai.com/issues-and-remediation.md): Triage findings, assign them, and take one from diff to merged pull request. - [Pull Request Security](https://nexusvoidai.documentationai.com/pull-request-security.md): Argus reviews every pull request and can block a merge until findings are resolved. - [Policies & Gates](https://nexusvoidai.documentationai.com/policies-and-gates.md): Detection rules, gate policies, and what actually blocks a merge. - [Integrations](https://nexusvoidai.documentationai.com/integrations.md): GitHub, Slack, Jira, Linear, CI/CD and the MCP server for coding agents. - [Team & Access](https://nexusvoidai.documentationai.com/team-and-access.md): Roles, the permission matrix, invitations and API keys. - [Billing & Credits](https://nexusvoidai.documentationai.com/billing-and-credits.md): Plans, what consumes a credit, and how the rule-scan quota works. - [Security & Data Handling](https://nexusvoidai.documentationai.com/security-and-data-handling.md): What Argus stores, where it runs, and how your source code is handled. ## Aegis - [Aegis, Autonomous Compliance & GRC](https://nexusvoidai.documentationai.com/aegis/index.md): Aegis stands up your compliance program from a short interview, keeps the evidence current from the systems you already run, and gives your auditors and customers a single source of truth, across SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, PCI DSS, NIST, the EU AI Act and more. - [Getting Started with Aegis](https://nexusvoidai.documentationai.com/aegis/getting-started.md): From an empty account to a materialized, framework-mapped compliance program, and what to do in your first 90 days. - [Security Assessment](https://nexusvoidai.documentationai.com/aegis/assessment.md): The onboarding assessment that decides what is in scope, records where you stand today, and drives the program Aegis generates for you. - [Roadmap](https://nexusvoidai.documentationai.com/aegis/roadmap.md): Your compliance program as a step-by-step process: phases, milestones with a clear 'done when', the real tasks and policies behind each one, optional dates you set, and a board to move the work. - [Frameworks & the Shared-Control Model](https://nexusvoidai.documentationai.com/aegis/frameworks.md): The frameworks Aegis supports, and why doing the work once satisfies many of them at the same time. - [Controls](https://nexusvoidai.documentationai.com/aegis/controls.md): The shared control library at the center of your program, how controls map to requirements, carry evidence, and roll up into framework coverage. - [Policies](https://nexusvoidai.documentationai.com/aegis/policies.md): Policies drafted in your real context, versioned, reviewed and signed off, the documented backbone of your program. - [Evidence & Tasks](https://nexusvoidai.documentationai.com/aegis/evidence.md): The backlog of proof behind your controls, organized, assignable, recurring, and increasingly automated. - [Document Vault](https://nexusvoidai.documentationai.com/aegis/vault.md): Upload the documents you already have. Aegis reads them and suggests vendors, risks, facts and assessment answers, and nothing reaches your program until a person approves it. - [Risk Management](https://nexusvoidai.documentationai.com/aegis/risk-management.md): A risk register that connects to your program, AI maps each risk to the controls that mitigate it and drafts the treatment tasks to close it. - [Penetration Testing](https://nexusvoidai.documentationai.com/aegis/penetration-testing.md): Connect Striker to Aegis to pull your VAPT scans and findings into your compliance program, promote a finding straight into your risk register, and file a scan report as penetration-test evidence. - [Vendor & Third-Party Risk](https://nexusvoidai.documentationai.com/aegis/vendor-management.md): A vendor register with AI-generated risk assessments, so third-party risk is scored and tracked instead of remembered. - [Trust Center](https://nexusvoidai.documentationai.com/aegis/trust-center.md): A hosted trust page that turns your compliance posture into a sales asset, and controls exactly who sees what. - [Security Questionnaires](https://nexusvoidai.documentationai.com/aegis/questionnaires.md): Upload a customer's security questionnaire and Aegis drafts the answers from your policies and organization details, turning a two-day task into a review. - [Security Training](https://nexusvoidai.documentationai.com/aegis/training.md): Assign security training to your people, let them complete it in the employee portal, and get graded, dated evidence of who passed, without a separate training vendor. - [Integrations & Cloud Tests](https://nexusvoidai.documentationai.com/aegis/integrations.md): Connect the systems you already run so evidence collects itself, and test your cloud posture directly against the controls that depend on it. - [NexusVoid Argus](https://nexusvoidai.documentationai.com/aegis/argus.md): Connect Argus to Aegis with one two-way connection: Argus findings become risks and evidence in Aegis, a Secure Code check fails while a critical finding is open, and your framework scores flow back to Argus. - [Endpoint Compliance & Shadow AI](https://nexusvoidai.documentationai.com/aegis/endpoint-compliance.md): A lightweight device agent that proves your endpoints are compliant, inventories the software your team runs, and surfaces the AI tools most programs never see. - [Team, Roles & Auditor Access](https://nexusvoidai.documentationai.com/aegis/team-and-access.md): Role-based access that gives your team, your contractors and your external auditor exactly the right view, no more, no less. - [Connect Claude and other AI assistants (MCP)](https://nexusvoidai.documentationai.com/aegis/mcp.md): Let Claude, Claude Code, Cursor and other MCP clients read and work on your compliance program, with exactly the access of the person who connected them. - [Capabilities Reference](https://nexusvoidai.documentationai.com/aegis/capabilities.md): Every Aegis capability in one place, the complete feature map, from AI onboarding to the auditor view. - [Use Cases](https://nexusvoidai.documentationai.com/aegis/use-cases.md): How founders with no security team, CISOs and GRC leads use Aegis, from standing up a whole security program to multi-framework governance at scale. - [Security & Data Handling](https://nexusvoidai.documentationai.com/aegis/security-and-data-handling.md): What Aegis stores, how access is controlled, and where we are on our own compliance journey, stated plainly for the security team evaluating us. - [Aegis FAQ](https://nexusvoidai.documentationai.com/aegis/faq.md): The questions CISOs, GRC leads and founders ask most about Aegis. ## Other Modules - [Striker: A Real Pentest, On Demand](https://nexusvoidai.documentationai.com/vapt/index.md): Give us a URL, get an auditor-ready penetration test back in 3-4 hours. Pay per scan, no subscription. - [Getting Started](https://nexusvoidai.documentationai.com/vapt/getting-started.md): Run your first scan on vapt.nexusvoidai.com: verify a domain, pay once, and get your report in about 3-4 hours. - [Capabilities](https://nexusvoidai.documentationai.com/vapt/capabilities.md): What a NexusVoid VAPT tests, the toolchain behind it, how findings are validated, and the three reports you receive. - [Trust & Attestations](https://nexusvoidai.documentationai.com/vapt/trust-attestations.md): Turn a clean pentest into a verifiable VAPT attestation, a public trust page, and an embeddable security badge. - [Use Cases](https://nexusvoidai.documentationai.com/vapt/use-cases.md): Where Striker fits: pre-launch checks, vendor security reviews, compliance evidence, due diligence, and continuous assurance. - [Integration API](https://nexusvoidai.documentationai.com/vapt/integrations.md): Pull Striker's scans, risks, reports, and attestations into your GRC platform with a REST API and signed webhooks. - [Pricing](https://nexusvoidai.documentationai.com/vapt/pricing.md): Simple per-scan pricing for Striker. No subscription, no contracts. You own every report. - [Red Teaming Suite: Find Vulnerabilities Before Attackers Do](https://nexusvoidai.documentationai.com/red-teaming/index.md): Find weaknesses in your AI systems before an attacker does. - [Getting Started with Red Teaming](https://nexusvoidai.documentationai.com/red-teaming/getting-started.md): Run your first red-team assessment against an AI system. - [Red Teaming Capabilities](https://nexusvoidai.documentationai.com/red-teaming/capabilities.md): What the Red Teaming Suite can test, and when to use each capability. - [Red Teaming Use Cases](https://nexusvoidai.documentationai.com/red-teaming/use-cases.md): Common red-teaming scenarios and the outcomes teams get from them. - [Red Teaming Integrations](https://nexusvoidai.documentationai.com/red-teaming/integrations.md): Connect the Red Teaming Suite to your CI/CD and reporting tools. ## API Reference - [GraphQL API](https://nexusvoidai.documentationai.com/api-reference/graphql.md): The GraphQL endpoint, authentication, pagination and the operations available. ## Help Center - [Common Questions](https://nexusvoidai.documentationai.com/help-center/faq/common-questions.md): Answers to the questions asked most often about scans, findings and billing. - [Contact NexusVoid AI](https://nexusvoidai.documentationai.com/contact.md): How to reach the NexusVoid AI team. ## Changelog - [Changelog](https://nexusvoidai.documentationai.com/changelog.md): Notable changes to NexusVoid, Argus and Aegis, newest first.