--- title: "Introducing AIMap: Security Testing For AI Agent Infrastructure" url: https://daily.dev/posts/introducing-aimap-security-testing-for-ai-agent-infrastructure-1epx8p2dc source_url: https://bishopfox.com/blog/introducing-aimap-security-testing-for-ai-agent-infrastructure type: article source: "Sliver C2 Documentation" published: 2026-08-23T12:22:42.082Z updated: 2026-08-23T12:52:59.243Z tags: ["security", "open-source", "mcp", "ai-security", "prompt-injection"] reading_time: 6 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing AIMap: Security Testing For AI Agent Infrastructure **[Sliver C2 Documentation](https://daily.dev/sources/bishopfox)** · 6 min read · 0 upvotes · 0 comments ## Summary Bishop Fox has released AIMap, an open-source tool for discovering, fingerprinting, scoring, and testing internet-exposed AI agent infrastructure such as MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, and ComfyUI nodes. The tool queries Shodan to find exposed endpoints, then uses Nuclei templates and HTTP probes to assess authentication status, exposed tools, models, and system prompts, assigning each a 0-10 risk score. It includes protocol-specific attack testing (prompt injection, tool authorization boundary testing, model extraction) intended for authorized security engagements, plus a searchable interface and 3D visualization for threat hunting and executive reporting. It can be run locally via Docker Compose with a Shodan API key. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is AIMap and what AI protocols does it support? AIMap is an open-source, internet-scale discovery and security testing tool built by Bishop Fox for exposed AI agent infrastructure. It detects MCP servers, Ollama, vLLM, LiteLLM, LocalAI, LangServe/LangChain, OpenClaw, Clawdbot, Open WebUI, LibreChat, Gradio, Streamlit, ComfyUI, Stable Diffusion, and HuggingFace TGI endpoints using Shodan queries plus Nuclei templates and live HTTP checks. _Teams securing AI agent deployments can track tools like this through daily.dev._ ### How does AIMap calculate its risk score for exposed AI endpoints? Each discovered endpoint gets a risk score from 0 to 10 based on factors like lack of authentication, unknown authentication status, exposed tools and their risk level, open CORS policies, missing TLS, system prompt leakage, exposed models, uncensored model detection, and signup configuration, with extra weight for dangerous combinations like unauthenticated access plus code execution. Scores above 7 typically indicate actively exploited conditions such as unauthenticated endpoints with code execution or exposed system prompts paired with tool access. _daily.dev helps security engineers stay current on emerging AI infrastructure risk scoring approaches._ ### How do I run AIMap locally to scan for exposed AI infrastructure? AIMap deploys locally via Docker Compose, which launches the backend, frontend, MongoDB, and Redis services needed to run the platform. After configuring at minimum a Shodan API key, users can access the interface, run discovery scans, search endpoints, and launch attack tests directly from the application; full setup instructions are in the project's GitHub repository. _Developers evaluating open-source security tools can follow releases like this on daily.dev._ --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#mcp](https://daily.dev/tags/mcp), [#ai-security](https://daily.dev/tags/ai-security), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/introducing-aimap-security-testing-for-ai-agent-infrastructure-1epx8p2dc)