Valsec
Different vendors shouldn’t mean different standards for security.
Valsec is a local-first network compliance auditor I built for multi-vendor infrastructure. It translates Cisco IOS/IOS-XE, Juniper JunOS, and Fortinet FortiOS configurations into one schema, then checks them against CIS, NIST SP 800-53, DISA STIG, and ISO/IEC 27001 controls. Authenticated CDP/LLDP discovery starts from an operator-approved device; remediation remains operator-approved. I validated the workflow on an OpenWrt router and a Cirotech appliance.
Many vendors. One language.
Cisco IOS/IOS-XE, Juniper JunOS, and Fortinet FortiOS are normalized into a shared model before any compliance evaluation.
Standards with a practical path.
Checks map to CIS, NIST SP 800-53, DISA STIG, and ISO/IEC 27001. Authenticated CDP/LLDP discovery was exercised on real OpenWrt and Cirotech hardware.
The operator stays in control.
The system presents evidence and proposed changes, while remediation requires approval. Local-first design keeps the network and its configuration data close to the operator.