How it works

How SecAI works, and what stays with you.

A product tour for the person who decides and the person who installs: what you see, what runs on its own, what waits for approval, and the three ways to get a server connected.

Know what happened. Know what happens next.

01

See the important findings

Review server security issues in understandable language, with supporting technical detail available.

02

Handle supported routine activity

Enable automatic IP blocking on an eligible plan, while other changes remain subject to approval.

03

Keep a clear record

See recorded actions and unresolved issues so your team can follow up.

Clear control over changes to your server.

SecAIYou and your technical contact
Monitors supported security signalsConnect supported servers and maintain access
Explains detected findingsReview business impact and investigate where needed
Blocks detected attacking IPs when enabled and includedChoose operating mode and trusted settings
Proposes supported changesApprove changes and arrange technical follow-up

SecAI is software. It is not a staffed, round-the-clock incident-response service. Keep a named technical contact responsible for issues that require investigation.

Start with your server and the person who looks after it.

  1. 01

    Choose your plan

    Select the number of servers you want to monitor.

  2. 02

    Connect a server

    Install with administrator access, or invite your technical contact.

  3. 03

    Review your first findings

    Confirm monitoring is active and agree who handles anything requiring attention.

root@web-prod-01Offline

The install, as it runs on a server. The hostname and the findings are examples.

Three ways to get connected

01

Install it yourself

Run the one-line install command with administrator access on a supported Linux server. The install script can be read before it runs, and the Trust Center lists everything the agent reads and may change.

Installation guide →
02

Invite your technical contact

Invite the developer or provider who administers your server from the Team page, as a technical contact. They get their own login, never yours; they add the server, run audits, and choose its mode, Automatic or Awaiting Approval, when they enrol it. Whether they may approve changes is yours to grant, per person. The installation guide stays public for anyone without an account.

What the agent needs →
03

Have a provider run it for you

A managed security provider or an agency can run SecAI for you under their own brand. SecAI is software; the people in that arrangement are theirs, not ours.

Managed, without a SOC →

See a security finding from detection to decision.

Follow a sample login-attack finding, an automatic block on an eligible plan, and a separate change that needs approval.

Sample data. The hostnames, counts and findings below are examples built for this page, not a customer's activity.

Specialist is reviewing 47 artifacts
Stage 2 of 4 · started 40s ago · 2 findings so far
Servers online
3/ 3
Risk score
28/ 100
Needs you
2
Critical open
1
IPs blocked
1,642
Incident trend · 7 days
048MonTueWedThuFriSatSun
CriticalWarningInfo
Fleet health
web-prod-0128
web-prod-0261
db-prod-0112
Activity · grouped
HTTP flood from 203.0.113.423,000 req · blocked automaticallyCritical
Hidden network connections ×3outbound to 3 unknown hostsHigh
Successful SSH logins ×4all from known keysExpected

Questions people ask before installing

Make server security easier to understand.

See how SecAI works, then evaluate it with the person who manages your Linux servers.

Compare plans