Use case
AI-drafted fixes that wait for your approval
Aribot drafts a fix for each finding with the model that wrote it on record, and nothing changes until a person approves the dry run.
AI-drafted security fixes, applied after approval. Approval-gated remediation across multi-cloud environments using STRIDE, PASTA, MITRE methodologies.
A plan is generated for a finding, carrying the provider and model that wrote it. It sits at Draft until someone approves it, shows exactly what it would change before it changes anything, and closes the finding only after the resource is re-read.
Findings
0
selected for remediation
Plans drafted
—
not measured yet
Changes made
—
not measured yet
Confirmed by re-check
—
not measured yet
No plan yet. The finding is known; what to do about it is not.
A finding with no plan is shown as a finding with no plan. Nothing here is pre-filled with a fix that was never generated.
GOES IN
A scan result
COMES OUT
working…
ILLUSTRATIVE SEED DATA — NOT CUSTOMER DATA
prod-assets publicly readable
When it comes up
A plausible-looking fix from a model is easy to approve and hard to audit later.
What changes
The plan carries the provider and model that wrote it and enters at Draft, not as an approved change.
When it comes up
You are asked to sign off something you cannot see the effect of until after it runs.
What changes
The dry run shows exactly what would change while changing nothing.
When it comes up
Reports mark findings resolved when the instruction was sent, not when the resource changed.
What changes
A finding closes on a re-read of the resource, and the re-check is recorded separately from the execution.
AI Suggestions
Ready to apply
Fixed after approval
This month
Hours Saved
Estimated manual work
Avg Confidence
Model-reported confidence
AI Recommendation
Block all public access and enable encryption at rest with AWS KMS
{
"BlockPublicAcls": true,
"IgnorePublicAcls": true,
"BlockPublicPolicy": true,
"RestrictPublicBuckets": true,
"Encryption": "AES256"
}30 seconds
AI Recommendation
Enable firewall rules and restrict access to specific VNets only
{
"networkAcls": {
"defaultAction": "Deny",
"virtualNetworkRules": [
{
"id": "/subscriptions/.../virtualNetworks/prod-vnet"
}
]
}
}45 seconds
AI Recommendation
Apply principle of least privilege - reduce roles to only required permissions
gcloud projects add-iam-policy-binding PROJECT_ID \ --member="serviceAccount:SA_NAME@PROJECT_ID.iam.gserviceaccount.com" \ --role="roles/logging.viewer" \ --condition=None # Remove excessive roles gcloud projects remove-iam-policy-binding PROJECT_ID \ --member="serviceAccount:SA_NAME@PROJECT_ID.iam.gserviceaccount.com" \ --role="roles/owner"
1 minute
AI Recommendation
Enable encryption at rest using AWS KMS and take encrypted snapshot
aws rds modify-db-instance \ --db-instance-identifier mydb \ --storage-encrypted \ --kms-key-id arn:aws:kms:region:account:key/key-id \ --apply-immediately
2 minutes
Illustrative figures — not customer data
Experience the power of autonomous security. Start protecting your infrastructure in minutes with our free tier.
Integrate Aribot into your workflow. Explore APIs, SDKs, and comprehensive guides for developers.
Join 1,200+ teams protecting their infrastructure with Aribot
Why teams use this
Use case
Aribot drafts a fix for each finding with the model that wrote it on record, and nothing changes until a person approves the dry run.