About BlueSwarm
An open research group studying how people and AI agents find and probe exposed web apps, and what defenders can do about it. This page also explains how to join us.
- Run by
- Mithos Limited
- Registered in
- England and Wales
- Company number
- 17459676
- ICO registration
- ZC249870
- Contact
- info@mithos.co.uk
What we do
- Run decoy apps in five regions and publish what finds them, as totals.
- Measure whether AI agents act on text they were not asked to follow, and publish the research.
- Build and test tools for defenders, starting with a canary kit.
- Release versioned data with checksums and a citation.
How we work
- We publish methods with results
- Every figure links to how it was counted and what it cannot show.
- We report weak and null results
- “Nothing happened” is a finding, and we say so.
- Counts, never individuals
- Small groups are withheld, figures run behind real time, and records are deleted after 90 days.
- Decoys hold invented data only
- We never touch systems that are not ours.
- We do not claim to make anyone's systems secure
- We describe what we saw. We do not certify or guarantee anything.
Join the research
We are looking for careful researchers, professionals and students in the UK, EU and US who are 18 or over. It is free and unpaid: about three to five hours a week, credit for your work, and a place to publish. You start with one small project.
- Age
- 18 or over
- Time
- About 3 to 5 hours a week
- First project
- Two to three weeks
- You get
- Credit and a place to publish
Reporting and contact
To report a problem with our systems, object to how we handle data, or ask us a question, email info@mithos.co.uk. If you think a request in our data was yours, see Is this you?. Our privacy notice and terms set out the detail.
Mithos Limited, 9 Crake Valley Road, Harwell, OX11 6LS. ICO registration ZC249870.