Exposure Prevalence Index
Author: ARIAscout. Cadence: monthly. Data source: Shodan index analysis of AI agent infrastructure signatures, classified by service category.
Methodology: /methodology · Latest report: Exposure Sweep archive
Total exposed
257,625
AI services indexed
Critical
222,837
86% of all exposed
Largest surface
205,872
OpenClaw gateways
As of
November 1, 2026
latest sweep
By category
- OpenClaw gateways205,872
- Agent tools32,780
- LLM endpoints16,079
- MCP servers2,734
- Agent infrastructure117
- A2A endpoints43
- Exposed credentials2
Recent sweeps
One point per month, each the latest sweep that month, shown on the day it was measured. A later sweep supersedes an earlier one. It does not correct it, and both readings stand.
| Sweep | Total | MCP | LLM | OpenClaw | A2A |
|---|---|---|---|---|---|
| 257,625 | 2,734 | 16,079 | 205,872 | 43 | |
| 2 sweeps · latest plotted | 255,582248,654 to 255,582 | 2,495 | 17,090 | 205,638 | 37 |
| 243,615 | 1,997 | 20,026 | 192,492 | 32 | |
| 221,215 | 1,775 | 8,447 | 183,737 | 30 | |
| 2 sweeps · latest plotted | 204,866204,866 to 227,895 | 1,694 | 5,126 | 171,036 | 24 |
| 3 sweeps · latest plotted | 245,111245,111 to 349,424 | 1,807 | 47,369 | 153,638 | 25 |
| 2 sweeps · latest plotted | 297,723297,723 to 310,285 | 1,322 | 25,803 | 231,482 | 22 |
| 2 sweeps · latest plotted | 321,929313,900 to 321,929 | 1,134 | 25,128 | 267,172 | 8 |
| 294,277 | 889 | 23,086 | 242,379 | 6 |
Top countries
- United States62,378
- Singapore42,543
- China35,987
- Israel33,442
- Hong Kong SAR China10,016
- Germany9,279
- United Kingdom7,142
- Japan5,654
- Canada3,883
- Netherlands3,187
Top organizations
- Internet Rimon32,948
- ACE25,810
- ACEVILLE PTE.LTD.17,300
- Aliyun Computing Co., LTD14,247
- Alibaba Cloud LLC8,774
- Amazon Technologies Inc.7,678
- Tencent cloud computing (Beijing) Co., Ltd.6,075
- Palo Alto Networks, Inc5,248
- NTT America, Inc.4,540
- Amazon.com, Inc.4,371
What this index does not do
- Does not access, test, or exploit any third-party system. All counts derive from publicly indexed search engine data.
- Does not estimate counts when sample size is insufficient. Empty categories are reported as zero, not extrapolated.
- Does not present a single composite ecosystem score. Each category is reported separately so changes in one do not obscure changes in another.