AI / Agent Infrastructure Discovery

AI endpoints are becoming their own attack surface. This maps an organisation's externally visible AI and agent infrastructure — the API, model, and agent hosts exposed to the internet — from the outside, with no cooperation needed. A best-effort first look at an emerging and often unmanaged part of the footprint.

How it uses the graph

Traverses the DNS layer of the graph, in 1 step:

How it walks the graph1 step
01AI / agent subdomains

Scanning the subdomain estate for AI/agent naming patterns…

DNS

Why each step runs

  1. 01AI / agent subdomains. AI/agent endpoints are usually exposed under predictable hostnames.

Key concepts