Reports
All OpenA2A research reports, newest first. The research tracks follow the list.
All published
- State of AI Agent Security: The Tool Calls Arrive
- State of AI Agent Security: Volume Without Declared Agents
- State of AI Agent Security: The Identity Ceiling
- State of AI Agent Security: Who Follows the Bait
- State of AI Agent Security: A Surface in Migration
- State of AI Agent Security: The Protocol Attackers Prefer
- Internet-Wide AI Exposure Sweep: April 2026
- OASB scanner benchmark, April 2026· Withdrawn
- Internet-Wide AI Exposure Sweep: March 2026
- AI agent security: 97,000 hosts, 1,190 exposed configs
Tracks
Exposure sweeps
MonthlyInfrastructure census via Shodan methodology. Population-level exposure measurement.
2 published
Behavioral Threat Reports
MonthlyHoneypot fleet observations classified by Threat Matrix technique. Cross-property attribution.
6 published
Coordinated disclosures
Event-drivenCVE pipeline publications. Follows the established 90-day disclosure protocol.
Archive empty. First report pending.
First Observed In The Wild
Event-drivenSame-week posts when a pre-registered technique signature first fires.
Archive empty. First report pending.
Indices
LiveThree live pages: Exposure Prevalence, Attack Prevalence, Sophistication.
Annual report
YearlyFull-year consolidation across all tracks.