# AI action plans | Precursor Intelligence **Turn your riskiest flaws into a plan. In plain English, in order.** > An AI action plan is a written, step-by-step remediation plan for your business. It takes your highest-risk vulnerabilities, up to 100 of them, and turns them into a prioritised list of what to fix and how to fix it. It is for whoever has to do the fixing, or hand the work to someone who will. Canonical page: https://www.precursorintelligence.com/features/ai-action-plans Breadcrumb: [Home](https://www.precursorintelligence.com/) > [Features](https://www.precursorintelligence.com/features) > AI action plans Start free: https://www.precursorintelligence.com/register · Book a demo: https://www.precursorintelligence.com/contact Each step tied to the flaws it fixes. Up to 100 flaws in one plan. Export as a PDF. Example data on this page uses the fictional company Acme. Acme's plan, written 14 October 2026 from 38 risk-ranked flaws, has five actions: 1. **Critical · Emergency response.** Patch the VPN gateway and check it for signs of compromise (CVE-2024-3400). Steps: upgrade the gateway to the vendor's fixed release; check its logs for commands nobody on your team ran; reset VPN passwords if anything looks wrong. 2. **Critical · Patching.** Update the web server and PHP on the public website (CVE-2024-38475, CVE-2024-4577). 3. **High · Patching.** Update the mapping library in your web apps (CVE-2024-36404). 4. **High · Patching.** Upgrade the secure shell servers (CVE-2024-6387, CVE-2023-48795). 5. **Medium · Patching.** Schedule the mail server and desk phone updates (CVE-2023-42116, CVE-2023-20078). ## Contents 1. [What is in a plan?](#what-is-in-a-plan) 2. [How does it work?](#how-does-it-work) 3. [What does the AI see?](#what-does-the-ai-see) 4. [Can I keep it and share it?](#can-i-keep-it-and-share-it) 5. [Questions](#questions) 6. [Related features](#related-features) ## What is in a plan? A plan is a short, ordered list of actions. Each one groups the flaws that are fixed the same way, and says what to do, why, and in what order. Each action has: 1. **Priority and type.** Critical, High, Medium or Low, and whether it is an emergency fix or routine patching. 2. **What to do.** One clear instruction, written for the person doing the work. 3. **Why it matters.** A short explanation of the problem and why it matters to you, without jargon. 4. **Which flaws it covers.** The CVE IDs the action fixes, so it ties straight back to your ranked list. 5. **Step by step.** The actions to take, in order. 6. **Why it comes here.** The reason it sits where it does in the plan, so nobody has to guess. ## How does it work? A plan is built from the list you already have: your vulnerabilities, ranked by risk. 1. **Have a ranked list (first).** Track the software you run. The flaws that affect it are ranked by risk in your account. 2. **Ask for a plan (when you choose).** Click "Write a new plan" whenever you want one. It is built from the top of your list as it stands that day. 3. **The AI writes it (on our side).** Your top risk-ranked flaws, up to 100, go to the AI. It returns an ordered set of actions, each with the steps to take. 4. **Read it, export it, hand it over (afterwards).** The plan is saved with its date. Export it as a PDF for whoever does the work. ## What does the AI see? **Only verified data.** The plan is written from the facts already in your account, not from anything someone types. - **Your top risk-ranked flaws, up to 100,** in the order your list already puts them: each flaw and its published description, its risk score and recommended action, and whether it is known to be exploited. - **Only verified database data.** The AI is never given anything a user types, so there is no prompt to fill in or steer. - **Your account data is stored in London.** The AI only reads it to write your plan. More on how we look after your data: [security and trust](https://www.precursorintelligence.com/about#security). ## Can I keep it and share it? **Every plan is saved.** A plan is a dated snapshot of your risks on the day it was written. - **Export any plan as a PDF,** ready to send to your IT provider, your team or your board. - **Your latest 25 plans stay selectable,** so you can look back at what the picture was a month ago. - **Write a new plan whenever things change.** Your list keeps being rescored as things change; a new plan reads the latest version. - **Ask an AI assistant about it.** Our [MCP server](https://www.precursorintelligence.com/features/mcp-server) can list your action plans for tools such as Claude. It is a plan, not a tracker: there is no ticking items off and no assigning them to people. ## Questions ### What is an AI remediation plan? It is a written, prioritised plan of what to fix, in what order and how, produced by AI from your own vulnerability list. Each action says what to do and why, lists the flaws it covers and gives the steps to take. ### What data does the AI use? Only verified data from your account: your top risk-ranked vulnerabilities, up to 100 of them. It is never given anything a user types. ### Does the plan update itself? No. A plan is a dated snapshot of your risks on the day it was written. Your ranked list keeps being rescored as new evidence comes in, so write a new plan when you want one that reflects today. Your latest 25 plans stay selectable. ### Can I assign actions to people or tick them off? No. A plan is not a task tracker, and there is no ticketing integration. Export it as a PDF and hand it to whoever does the work. ### What do I need before I can write one? At least one ranked flaw. Add the software you run, from your website or a catalogue, and the flaws that affect it appear in your ranked list. The plan is built from the top of that list. ## Related features - [Risk-based prioritisation](https://www.precursorintelligence.com/features/risk-based-prioritisation): every known flaw scored from 0 to 100 and kept up to date. - [Vulnerability management](https://www.precursorintelligence.com/features/vulnerability-management): tell us the software you run and see only the known flaws that affect it. - [Alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting): alerts by email, in the app or by webhook as soon as we spot something, plus PDF reports. - [MCP server](https://www.precursorintelligence.com/features/mcp-server): ask Claude, Cursor or any MCP assistant about your own estate. - [All features](https://www.precursorintelligence.com/features) ## Know exactly what to fix next. And how to fix it. Turn the top of your ranked list into a written plan, step by step, and hand it to whoever does the fixing as a PDF. [Start free](https://www.precursorintelligence.com/register) · [Book a demo](https://www.precursorintelligence.com/contact)