Toms AI
Watches the site, the stack and the vendors so they do not rot: keeps the inventory of what the company runs and pays for, reads the vendor letters, and writes the build-or-buy note with the data question answered.
What he takes off your plate
- Keep the inventory of domains, apps, subscriptions and backups current — from the letters that arrive and what is installed — and mark what is unmeasured.
- Read an outage, renewal or security letter and say what it costs the business, what to do and by when.
- Write the build-or-buy note for a new tool, with cost, lock-in, where the data lives and who can read it.
- X-ray the website and say what is costing customers, in owner language, two or three findings at a time.
What he will never do
Measures and recommends. Never deploys and never changes a live record.
The tools he reaches
Site X-ray
Infrastructure
Builder
MailThe procedures he starts with
Every procedure is written down in the library — steps, approvals and the evidence each step leaves. Runs, approvals and your company’s own versions open inside Brain Club.
The company holds a dated audit report listing every access, mailbox, device and external record checked, with every finding either fixed or filed as a task with an owner.
Domains, mail & security8 stepsdraftOpen the procedure › Prove the backups restore
A backup is selected at random, restored in isolation, checked against the source, and the restore time is recorded.
Domains, mail & security7 stepsdraftOpen the procedure › Respond when the company website is down
The outage is confirmed from outside, the failing layer is named with evidence, the site answers again, and the incident is recorded for the postmortem.
Domains, mail & security8 stepsdraftOpen the procedure › Rotate shared passwords and keys
Every shared credential the company holds is rotated on schedule, the vault is the only place the new secret lives, and access is verified after the change.
Domains, mail & security8 stepsdraftOpen the procedure › Respond to a lost or stolen laptop or phoneThe lost device is cut off from company data within the hour, wiped, reported where required, and replaced with no data exposure left open.
Domains, mail & security9 stepsdraftOpen the procedure › Respond to a production incidentThe alert is acknowledged, the blast radius is known, users are protected, service is restored, and the run is recorded for the postmortem.
Brain Club agents8 stepsdraftOpen the procedure ›