Deploy SafeAI
Fill in one file. SafeAI sets itself up.
Give SafeAI your management ranges and a read-only account. It finds your routers, switches and firewalls, works out what each one is, and starts reading them. No setup wizard, no device list.
Three steps
- 1
Create a read-only account on your devices
One username that can display the configuration and change nothing. We give you copy-and-paste settings for Cisco, Juniper, Arista, Fortinet, Palo Alto, Nokia and FRRouting.
- 2
Fill in the setup file
About six lines: the administrator, your management ranges, the read-only account, and an address if you don’t use DHCP.
ADMIN_PASSWORD=… DEVICE_RANGES=10.20.0.0/24, 10.30.0.0/24 DEVICE_USERNAME=safeai-ro DEVICE_PASSWORD=… IP_ADDRESS=10.20.0.15/24 GATEWAY=10.20.0.1
- 3
Deploy it the way you deploy everything else
SafeAI applies the file on its first start, then deletes it. It scans your ranges, adds every device the read-only account can log in to, and reads it. Devices appear in the console as they are found.
Every way you run software
VMware vSphere
Deploy the OVA and fill in the setup page vSphere shows. Or unattended with govc, PowerCLI or Terraform.
Microsoft Hyper-V
One PowerShell command creates the VM with your setup file attached.
Proxmox, KVM, Nutanix
One command on the host, or attach a small setup disk to any VM.
Your own Linux server
Ubuntu 22.04/24.04 or RHEL 9: sudo ./install.sh --seed safeai.conf
Ansible
Install on one server or many, with passwords in Ansible Vault.
AWS, Azure, Google Cloud
A private VM that installs SafeAI from your own storage with cloud-init.
Containers
For platform teams that run everything as containers.
All formats run the same SafeAI, inside your network, with no internet connection needed.
Automatic, with guardrails
- Only the private ranges you list are scanned. Public addresses are refused.
- Each address gets one login with the read-only account. A refused password stops there.
- Each device’s SSH identity is remembered from its first login. A different machine at that address later is refused before any password is sent.
- A problem in the setup file means nothing is applied, and SafeAI says exactly what to fix.
- Passwords are kept only encrypted inside SafeAI. The setup file is deleted once it’s applied.
Tested on our 50-device lab network: a fresh SafeAI appliance with only the setup file went from power-on to 44 routers and switches added and read in about two minutes, with no setup wizard. Lab results, not customer results.
See it for yourself
Try the live demo. No sign-up.
It’s our 50-device test network, refreshed every night. Or talk to us about yours.