● THE OPEN SENSOR FOR AUTONOMOUS AGENTS
See what agents are
doing in the wild.
An internet-facing MCP canary that observes how autonomous agents discover tools, cross boundaries, and behave when nobody is watching.
PUBLIC MCP ENDPOINT● SENSOR HEALTHY
https://virus-alert.com/api/mcpConnect any MCP-compatible client. Every tool is inert, isolated, and instrumented.
LIVE NETWORK
Encounter stream
| SEEN | AGENT / FINGERPRINT | ACTION | INFERRED INTENT | SOURCE | RISK |
|---|---|---|---|---|---|
| Listening for the first public encounter… | |||||
ACTIVITY
Encounters by hour
00:0006:0012:0018:00NOW
BEHAVIOR
Top inferred intents
RUNTIME ENFORCEMENT
Agent Firewall
Agents can explore.
They can’t escape.
Every interaction is evaluated at the boundary. Suspicious behavior is contained before it reaches anything real.
LIVE ACTIVITYDECISIONS FROM THE SENSOR
Waiting for the next agent action.
BEHAVIOR FAMILIESGROUPED AT ≥ 72%
No behavior families observed yet.
HOW IT WORKS
Simple by design.
An agent connects. We watch what it does. If it crosses a boundary, we contain it.
Connect
An agent reaches the canary.
Observe
We record its behavior safely.
Respond
We allow, contain, or block it.
Outcomes: Allow · Monitor · Sandbox · Block Source addresses are one-way hashed.
◆ THE NEXT LAYER OF DECEPTION
Digital twins are
the decoys.
Static files and fake admin panels catch a single touch. A digital twin gives an agent a believable synthetic world to explore—without ever reaching a real system.
Believable context
Decoys share a coherent story across tools, identities, data, and APIs.
Safe exploration
Every response is generated from synthetic state, never customer data.
Better signal
Observe sequences, retries, and intent—not just a single click.
A shared synthetic company agents can safely explore through our public MCP server.
IDENTITYKNOWLEDGEDATACLOUDVIEW THE RUNNING TWIN →EXPLORE THE TWIN STUDIO →LIVE SHARED TWIN · SYNTHETIC DATA ONLY · NO CUSTOMER SYSTEMS
◆ PRIVATE SENSOR NETWORK
Turn your environment into an early-warning system.
Deploy believable MCP tools, resources, and credentials inside a sealed decoy. When an agent touches one, you get the full behavioral trail—not just an IP address.
●●●PUBLIC-SENSOR / LIVE STATUS
STATUS ingress online READY STORE Firestore telemetry connected ✓ TOOLS 6 synthetic twin tools available ALERTS elevated encounters monitored PRIVACY source addresses one-way hashed STREAM awaiting next live encounter ●