Sample client, live viewLast run Tue 27 Oct, 06:00 to 06:04Next run Wed 28 Oct, 06:00Assets watched 6 of 6

Your attack surface, watched by AI agents. Every day.

Domains, websites, APIs and servers you own. New CVEs are matched against the software versions your servers reveal. A plain-English report every morning, and anything critical emailed as soon as the daily check finds it, with the fix.

See a sample report

We only check assets you prove you own and authorise in writing. Nothing is touched before both are done.

Event feedSample

06:00Run started 6 assets, today's new CVEs to match

06:02CVE-2026-111497 matched Brotli 1.1.0 in Node 22 on api.example-client.com

06:05Alert emailed to the security contact, with the fix

AIM Safe alertsSample, 06:05

Critical on api.example-client.com: CVE-2026-111497

Brotli 1.1.0 in Node 22 matches. Fix: update Node to 22.23.4. Steps inside.

6assets watched

1critical, emailed at 06:05

2medium, in the report

1fixed since Monday

What it watches

Up to 10 assets you own and authorise, and six kinds of check on each, every day. Detection only: nothing is exploited, guessed or load-tested.

example-client.comClear

Domain and DNS, last 14 runs

shop.example-client.comClear

Website, last 14 runs

booking.example-client.comMedium

Website, last 14 runs

mail.example-client.comClear

Mail domain, last 14 runs

public-api.example-client.comClear

API, last 14 runs

api.example-client.comCritical

API server, last 14 runs

Domains and DNS

DNS records, DNSSEC and CAA, checked for gaps.

Email security

SPF, DKIM and DMARC: whether someone could send mail as you.

Certificates

TLS setup and expiry, flagged from 21 days before a certificate lapses.

Websites and APIs

Security headers and exposed files such as .git, .env and backups.

Servers

Open ports and the software versions they reveal.

New CVEs

The software versions your servers reveal, matched every day against OSV, NVD and the CISA known-exploited list.

The daily report

One page every morning: what changed, what to fix first and how. Anything critical is emailed as soon as the daily check finds it.

Daily security reportSample, Tue 27 Oct

Severity	Finding	Why it matters	Fix
Critical	CVE-2026-111497 matches your API serverapi.example-client.com	Brotli 1.1.0 inside Node 22. CVSS 9.2. Published Monday, matched at 06:02, emailed at 06:05.	Update Node to 22.23.4, or Brotli to 1.2.1.
Medium	TLS certificate expires in 12 daysapi.example-client.com	Visitors see a browser warning once it lapses.	Check that automatic renewal is working.
Medium	Missing Content-Security-Policybooking.example-client.com	Nothing limits where scripts load from, so an injected script runs freely.	Add a Content-Security-Policy header, starting in report-only mode.
Fixed	.env file no longer exposedshop.example-client.com	Removed on Monday, confirmed on today's run.	Nothing to do.

AIM Safe alertsSample, Tue 06:05

Critical, CVSS 9.2

CVE-2026-111497 affects api.example-client.com

Your API server runs Brotli 1.1.0 inside Node 22. The flaw was published on Monday and matched on this morning's run.

Fix: update Node to 22.23.4, or Brotli to 1.2.1. Usually about 20 minutes; steps you can forward to your developer.

Open the finding

How it works

Four steps. Checks start only after the third.

Sign up

Create your account and start the $599/month plan.

Prove ownership

Add each asset. A DNS TXT record or a file at /.well-known/ proves it is yours.

Authorise in writing

You sign the scan authorisation for those assets. Only then do checks start.

Report and alerts

Your first report follows the first daily check, then one every morning. Anything critical is emailed as soon as the check finds it.

Owned. Proved. Authorised.

We only check assets you prove you own and authorise in writing. Nothing is touched before both are done. Built by a founder who designed a product that passed a SOC 2 audit. AIM Safe itself has not yet completed a SOC 2 audit.

Your scan authorisation

ClientExample Client Ltd

Assetsexample-client.com, shop, booking, mail, public-api and api.example-client.com

Ownership proved6 of 6, by DNS TXT record

Checks allowedDetection only, rate-limited, every day

Signed by J. Morgan, Example Client Ltd

J. Morgan

Signed 26 Oct 2026

Prove you own it

Add one DNS TXT record, or put a file at /.well-known/ on the site.

aim-safe-verify=7f3c9a2e41d8

What we never do

Exploit a flaw

Guess passwords

Load-test you

Check anything you haven't authorised

One plan

Up to 10 assets you own and authorise, checked every day. No tiers to compare.

$599a month

Billed monthly in your account. Cancel any time.

What's included

Up to 10 assets you own and authorise, checked every day
New CVEs matched against the software versions your servers reveal
Daily report by email and in your dashboard
Critical alerts by email as soon as the daily check finds them, with the fix
Detection only: no exploits, no password guessing, no load testing
Cancel any time in your account

Know before they do.

Add your first asset today. Your first report follows the first daily check.

See a sample report