AI tools exposed on the internet grew 63% in nine months
Censys counted 267,915 addresses with AI software open to the internet in July 2026, up from 164,088 in October 2025. n8n leads, and most installations that report a version have a critical flaw.
Source: The internet's attack surface moves at very different speeds (helpnetsecurity.com). Text prepared with AI from this source.
What happened and what to do
According to Help Net Security, the growth spans 44 products. n8n, a workflow automation platform used to connect AI agents to other services, accounts for 113,926 hosts, and 76.1% of those reporting a version run a release affected by at least one flaw scored 9.0 or higher. These servers store credentials for the services their workflows connect to. OpenClaw, a self-hosted AI agent, gained a control panel on January 5, 2026; six days later there were 2 exposed panels and, by April 7, 85,478.
The recommendation is to take automation and agent panels off the internet, behind a VPN or strong authentication, update the installations and rotate the credentials stored on any server that was exposed. Censys also shows that old versions of business products barely disappear, a sign of abandoned installations: keep an inventory of what is online and shut down what nobody uses.
How the consultancy can help
Wendelmaques can map the AI and automation tools the company has exposed, such as n8n and agent panels, put them behind authentication and organize updates and rotation of the credentials that went through them. The scope is defined according to the environment.
Next step
If your team uses n8n or self-hosted AI agents, send a short description of the environment and receive a scoped proposal.
Let's assess your project
I reply with scope and a proposal.