Four scanners counted the same exposed AI agents. Their answers ranged from 21,639 to 220,000.
OpenClaw really is leaking control panels onto the open internet. The headline number just depends on which vendor's scanner you ask and what they decided to call exposed.
"More than 220,000 OpenClaw AI-agent instances are exposed on the public internet" [SOURCE ↗]
THE CLAIM. over 220,000 OpenClaw instances are exposed on the public internet. THE CHECK: that is the top of a range, not a measurement. Censys, the reference scanner, fingerprinted 21,639 exposed instances on January 31 by matching the control-panel HTML title. SecurityScorecard reported roughly 135,000, Penligent over 220,000, all for the same underlying question. As one analysis put it, that is a factor of 1,000 between the broadest and narrowest reading, and neither is wrong, they answer different questions. OpenClaw's exposure is real. The single big number is scanner choice.
How many OpenClaw instances are sitting exposed on the public internet? Pick your source and pick your panic. Penligent says over 220,000. SecurityScorecard says about 135,000. Censys, the scanner most of the security industry treats as a reference, counted 21,639 on January 31. Same object, same we
🔒 THE FULL AUTOPSY · FREE WITH AN ACCOUNTYou just read the free check. Sign in free, a code by email, no passwords, and the rest unlocks: the evidence trail, the steelman and the rebuttal, all 3 sources with quotes and screenshots, and our on-record call.
Couldn't verify your access — this looks like our error, not yours.