How do I secure OpenHands?

Set session API keys (OH_SESSION_API_KEYS_*) before binding to anything other than localhost.

How many OpenHands instances are exposed?

78 OpenHands instances are reachable in the Shodan index (source: Shodan count · `http.html:"OpenHands Agent Server"`, 2026-08); that is a fingerprint match, not a verified zero-auth count.

← what I check

EXPOSURE OpenHands
SEVERITY CRITICAL
PROBE GET :8000/server_info

CRITICAL

Is your OpenHands exposed?

Coding-agent server on the internet: strangers starting sessions, running tools, burning LLM budget.

Scan a host you own → Fix card Census

Why it matters

OpenHands Agent Server is a coding-agent control plane. Without auth on a public interface, strangers can start agent sessions, run tools, and burn your LLM budget.

How common is it?

78 OpenHands instances are reachable in the Shodan index. Fingerprint match, not a verified zero-auth count · src: Shodan count · `http.html:"OpenHands Agent Server"` · 2026-08

Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.

Fix it

The full walkthrough lives on the fix card, kept current in one place:

Full fix card: openhands-exposed →