Turn your riskiest flaws into a plan. In plain English, in order.
An AI action plan turns your highest-risk vulnerabilities, up to 100 of them, into a written, prioritised list of what to fix and how. It is for whoever does the fixing.
An example action plan for Acme, written on 14 October 2026 from 38 risk-ranked flaws. It has five actions in order: two Critical, two High and one Medium. Use the priority buttons to filter the actions.
- 1CriticalEmergency responsePatch the VPN gateway and check it for signs of compromise
CVE-2024-3400
Action steps- Upgrade the gateway to the vendor's fixed release
- Check its logs for commands nobody on your team ran
- 2CriticalPatchingUpdate the web server and PHP on the public website
CVE-2024-38475CVE-2024-4577
- 3HighPatchingUpdate the mapping library in your web apps
CVE-2024-36404
+ 2 more actions in the plan
What is in a plan? One action at a time.
A plan is a short, ordered list of actions. Each one groups the flaws that are fixed the same way, and says what to do, why, and in what order.
Priority, type and timing
Critical, High, Medium or Low, whether it is an emergency fix or routine patching, and when to do it.
What to do
One clear instruction, written for the person doing the work.
Why it matters
A short explanation of the problem and why it matters to you, without jargon.
Which flaws it covers
The CVE IDs the action fixes, so it ties straight back to your ranked list.
Step by step
The actions to take, in order.
Impact and done when
What the action protects, and the check that tells you it is finished.
Why it comes here
The reason it sits where it does in the plan, so nobody has to guess.
How does it work? One click, then read.
A plan is built from the list you already have: your vulnerabilities, ranked by risk. You choose when to write one.
- First
Have a ranked list
Track the software you run. The flaws that affect it are ranked by risk in your account.
- When you choose
Ask for a plan
Click "Write a new plan" whenever you want one. It is built from the top of your list as it stands that day.
- On our side
The AI writes it
Your top risk-ranked flaws, up to 100, go to the AI. It returns an ordered set of actions, each with the steps to take.
- Afterwards
Read it, export it, hand it over
The plan is saved with its date. Export it as a PDF for whoever does the work.
What does the AI see? Only verified data.
The plan is written from the facts already in your account, not from anything someone types. That keeps it grounded in your real list.
- Your top risk-ranked flaws, up to 100, in the order your list already puts them.
- Only verified database data. The AI is never given anything a user types, so there is no prompt to fill in or steer.
- Your account data is stored in London. The AI only reads it to write your plan.
More on how we look after your data: security and trust.
AI remediation plan · Verified data only
It is a written, prioritised plan of what to fix, in what order and how, produced by AI from your own vulnerability list. Each action says what to do and why, lists the flaws it covers and gives the steps to take.
Only verified data from your account: your top risk-ranked vulnerabilities, up to 100 of them. It is never given anything a user types.
No. A plan is a dated snapshot of your risks on the day it was written. Your ranked list keeps being rescored as new evidence comes in, so write a new plan when you want one that reflects today. Your latest 25 plans stay selectable.
No. A plan is not a task tracker, and there is no ticketing integration. Export it as a PDF and hand it to whoever does the work.
At least one ranked flaw. Add the software you run, from your website or a catalogue, and the flaws that affect it appear in your ranked list. The plan is built from the top of that list.
Know exactly what to fix next. And how to fix it.
Turn the top of your ranked list into a written plan, step by step, and hand it to whoever does the fixing as a PDF.