Wow! That is a very intriguing question, and one that I have never considered before. Just spitballing here but you could possibly use trad apps like Lynis, Greenbone, Nikto, etc. These apps often produce rather verbose and sometimes cryptic output, i know Lynis sure does. So, you could use a prompt like:

'You are a security analyst. Review the following Nmap scan results. Identify services running outdated or potentially vulnerable versions, suggest likely CVEs, and prioritize findings by risk.'

Then use something like llama3.1:70b, mistral-nemo or deepseek-coder-v2, and pipe your security scans into your local AI. You could feed it your NGINX, docker configs, pFsense firewall rules in and ask the model to audit them.

IDK, that's a very good question I think. It'll be interesting to see what others have to comment.