Indices

Three live measurements of the AI agent security ecosystem. Each publishes alongside a methodology document explaining how the value is computed and how a third party can reproduce it.

Exposure Prevalence

Live · ARIAscout (Shodan / Censys)

Population-level measurement of exposed AI agent infrastructure on the public internet.

Live. Refreshed each monthly ARIAscout sweep.

Attack Prevalence

Live · ARIAtrap (TrapMyAgent fleet, AgentPwn, HoneyMap)

Volume and classification of observed attack sessions against the OpenA2A honeypot fleet, partitioned by Threat Matrix technique.

Live. Classified attack evidence over a rolling 30-day window.

Sophistication

Live (distribution-only) · ARIAtrap session content

Technical sophistication of observed attacks on a one-to-ten scale. Distribution-only until classifier validation.

Live, distribution-only. The mean is withheld until the classifier passes its F1 gate on a labeled holdout.

Why three indices, not one

Exposure, attack volume, and sophistication measure different things. Collapsing them into a single ecosystem score would obscure the question being asked. Exposure is observable from outside. Attack volume is observable on instrumented surfaces. Sophistication is observable only when sessions are deep enough to classify. Each index publishes independently with its own methodology and its own confidence interval.