Cite as: Real Problem AI problem “Why are a million AI services publicly exposed with no auth?”. Opportunity score 8.9 out of 10 (severity 10, AI feasibility 8, market signal 9, competition gap 8). Category Others. Trend Agents. Source signal: The Hacker News "We Scanned 1 Million Exposed AI Services" (May 2026), Penligent.ai "AI Agents Hacking in 2026", r/cybersecurity AI-attack threads.. Canonical URL: https://www.realproblem.ai/archive/why-are-a-million-ai-services-publicly-exposed-with-no-auth.
Why are a million AI services publicly exposed with no auth?
A May 2026 scan found ~1M AI services (vector DBs, MCP servers, agent inboxes, internal copilots) reachable on the public internet with default creds, no auth, or hard-coded keys. Hackers shipped the first AI-developed zero-day 2FA bypass the same month. AI-first SaaS teams have shipped agents faster than their security posture.
Who has it: Solo / small-team AI founders shipping LLM features, vector DBs, MCP servers and internal copilots without a security review pipeline.
Evidence
The report describes scanning for vector databases and other AI services on default ports and finding a very large number open to read and write with no credentials.
Our summary of the public post linked below, not a quote. Nobody submitted it to Real Problem AI.
The Hacker News "We Scanned 1 Million Exposed AI Services" (May 2026), Penligent.ai "AI Agents Hacking in 2026", r/cybersecurity AI-attack threads.Scoring breakdown
Existing players
- Snyk / Semgrep · Code-side SAST; misses runtime AI infra exposure
- Wiz / Orca · Cloud security; expensive, enterprise-priced, no AI-specific posture
- AWS Inspector / GuardDuty · AWS-only; doesn't classify AI surfaces
- Prompt-injection scanners (Lakera, PromptArmor) · Prompt-layer; ignore infra-exposure layer
What they are missing
An AI-posture scanner shaped for indie / small-team founders: point it at a domain, get back every exposed vector DB, MCP endpoint, embedding API, agent inbox, with a severity ranking and one-click remediation snippets. Priced like a developer tool ($29-$79/mo) not enterprise SaaS.
Stack hint
#AI9 · Canonical URL: https://www.realproblem.ai/archive/why-are-a-million-ai-services-publicly-exposed-with-no-auth