The trick: Moved Ruler
Four scanners counted the same exposed AI agents.
Their answers ranged from 21,639 to 220,000.
over 220,000 OpenClaw instances are exposed on the public internet.
Before you read on. Your call?
TRUE, BUT
10x spread
that is the top of a range, not a measurement. Censys, the reference scanner, fingerprinted 21,639 exposed instances on January 31 by matching the control-panel HTML title. SecurityScorecard reported roughly 135,000, Penligent over 220,000, all for the same underlying question. As one analysis put it, that is a factor of 1,000 between the broadest and narrowest reading, and neither is wrong, they answer different questions. OpenClaw's exposure is real. The single big number is scanner choice.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
Start your free month →First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge. Already a member? Sign in
Couldn't check your access. That's on us.
The trick has a name
We call it Moved Ruler: two methods, two answers, one of them quoted. You'll see it again. Learn to spot it →
Receipts
- Supports dev.to:
Penligent found over 220,000, SecurityScorecard identified 135,000, Censys tracked growth from 1,000 to 21,000+ in a single week.
- Refutes blog.cyberdesserts.com:
a factor of 1,000 for the same underlying question. Neither is wrong. They are precise answers to different questions
- Context censys.com:
As of 31 January 2026, Censys has identified 21,639 exposed instances
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.