The trick: Moved Ruler
Four scanners counted the same exposed AI agents.
Their answers ranged from 21,639 to 220,000.
over 220,000 OpenClaw instances are exposed on the public internet.
Before you read on. Your call?
TRUE, BUT
10x spread
that is the top of a range, not a measurement. Censys, the reference scanner, fingerprinted 21,639 exposed instances on January 31 by matching the control-panel HTML title. SecurityScorecard reported roughly 135,000, Penligent over 220,000, all for the same underlying question. As one analysis put it, that is a factor of 1,000 between the broadest and narrowest reading, and neither is wrong, they answer different questions. OpenClaw's exposure is real. The single big number is scanner choice.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
30 days free, then A$89 a year. Payment card required. Cancel before the trial ends to avoid the first charge.
Review my 30-day free trial →- At sign-up: 30 days free. Payment card required. One introductory trial per customer.
- Your trial ends 30 days after you start. Unless you cancel before then in Account → Manage subscription, we charge A$89 for the first year. It renews automatically at A$89/yr until cancelled.
- You can ask for a full refund within 14 days after any annual payment, renewals included, with no reason needed, by emailing hello@bskiller.com. This voluntary refund does not limit your rights under the Australian Consumer Law.
By starting your trial, you agree to the Terms.
BS Killer is published by Inferno Tech Pty Ltd, ABN 27 647 413 474.
Get tomorrow’s check free by email.
Couldn't check your access. That's on us.
The trick has a name
We call it Moved Ruler: two methods, two answers, one of them quoted. You'll see it again. Learn to spot it →
Receipts
- Supports dev.to:
Penligent found over 220,000, SecurityScorecard identified 135,000, Censys tracked growth from 1,000 to 21,000+ in a single week.
- Refutes blog.cyberdesserts.com:
a factor of 1,000 for the same underlying question. Neither is wrong. They are precise answers to different questions
- Context censys.com:
As of 31 January 2026, Censys has identified 21,639 exposed instances
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.
