How it works

How NicoServe works: connect, ask, fix and verify

Connect your domain for security checks. Talk through the results with your AI companion, then use guided fixes and a verification scan to check your changes.

  1. Add your domain

    https://example.comINPUT
    DNS verification
    _security-concierge TXT "ncs=af72c9e1…"

    One-time DNS ownership check

  2. Ask your companion

    88
    Security score
    Website
    Email
    SSL/TLS
    Weighted checks
    HIGH: Missing SPF record detected

    “What does this finding mean?”

  3. Fix and verify

    Suggested fix (TXT)
    v=spf1 include:_spf.example.net ~all
    Verified by re-scan

    Guided steps, snapshot before every fix

Data flow

From domain to verified fix.

Every step produces evidence you can inspect — nothing is hidden behind a black box.

  1. 01

    Your domain

    example.com

  2. 02

    Daily checks

    Web · DNS · Email · TLS

  3. 03

    Weighted score

    0–100 with evidence

  4. 04

    AI companion

    Explains & prioritises

  5. 05

    Fix & verify

    Re-scan confirms

What gets checked

Daily security scans. Five-minute uptime checks.

SSL / TLS

  • Certificate validity & expiry
  • HTTPS redirect
  • HSTS policy

Website headers

  • CSP, X-Frame-Options
  • Referrer & permissions policy
  • Server version disclosure

Email security

  • SPF and DMARC records
  • DKIM selectors
  • MX and reverse DNS

Attack surface

  • Subdomain discovery
  • Dangling DNS / takeover risk
  • Live DNS records viewer

Reputation

  • URLhaus malware listings
  • Google Safe Browsing fallback
  • Evidence saved per scan

Website uptime

  • HTTPS checks every 5 minutes
  • Availability and response times
  • Automatic outage & recovery incidents

Getting started

Up and running in minutes.

No agents, plugins or code changes. NicoServe looks at your site the way the outside world does.

  1. Minute 0

    Add your domain

    Enter the address. A first scan starts straight away.

  2. Minute 2

    First results

    Score, findings and severity appear on your dashboard.

  3. Minute 5

    Verify ownership

    Add one DNS TXT record to unlock uptime monitoring, pen tests and safe autopilot.

  4. Ongoing

    Security & availability monitoring

    Security scans run daily. Uptime checks run every five minutes, with automatic outage and recovery alerts. Open Wall view to keep all assets visible on an office or NOC screen, refreshing every minute.

  5. Connect your team

    Route alerts to the right place

    An owner or admin connects Slack or a signed HTTPS webhook in Notifications. Set a severity threshold, send a test alert and check delivery status. Workspace channels run independently of personal preferences.

  6. Across your estate

    Prioritise the fleet

    Review security, threat, expiry and uptime totals. Search and filter the risk-first asset table, then open the affected site to investigate.

  7. Review & share

    Report the progress

    Follow 30-day score trends and scan, remediation and incident activity. Download an executive PDF with current posture, asset inventory and completed-fix totals.

Automatic incident response

An outage never ends at an alert.

Uptime incidents stay separate from security findings. Follow the full timeline in your workspace, from confirmed downtime to the moment your website responds again.

  1. 01 / Confirm the outage

    Repeated failed checks confirm downtime before an incident opens. Inconclusive responses remain unknown.

  2. 02 / Open an incident & alert

    NicoServe records the outage and notifies your notification centre and eligible Slack or webhook channels. Follow the alert link to review the timeline and acknowledge the incident.

  3. 03 / Confirm recovery

    Successful checks confirm recovery, close the uptime incident and update its timeline. Recovery notices reach enabled Slack and webhook channels at every severity threshold.

Built-in safeguards

Confidence at every step.

Snapshot before every fix

DNS state is recorded so you can compare and roll back.

Verified, not assumed

A fix only counts once a fresh scan confirms it.

Grounded answers

The companion uses your scan data and won't invent results.

Full history

Score trends, scan log and remediation timeline per site.

Meet your AI security companion.

Connect your website, ask your first security question, and get clarity on what to do next. Monitoring, natural-language chat and guided fixes. Every feature included.

Natural-language chat · Daily checks · Guided fixes