# Introduction

> What Airship is and how its agents secure your stack.

Airship deploys autonomous security agents that continuously find and fix vulnerabilities across your software stack: web apps and APIs, AI agents, source code, packages, containers, binaries, kernels, smart contracts, infrastructure and cloud. Every finding is proven with a working exploit and comes with a merge-ready fix.

## How it works

- **Discover.** Airship's agents map your attack surface. See [What Airship secures](/docs/targets) for everything they cover.
- **Prove.** Every finding ships with a proof-of-exploit and reproduction steps, validated against your live environment. Only confirmed, exploitable issues are reported.
- **Fix.** Airship writes a fix, retests to confirm the vulnerability is gone, and delivers a merge-ready pull request.
- **Keep watching.** Airship plugs into your CI/CD pipeline to review every pull request, and monitors your attack surface continuously, testing new CVEs against your systems as they appear.

> [!IMPORTANT]
> Read [Authorized testing](/docs/authorized-testing) before you point Airship at anything.

> [!TIP]
> Every docs page is also plain Markdown: add `.md` to its URL. [llms.txt](/llms.txt) lists them all for AI tools.