Recorded Future Launches AI Infrastructure Lists for Shadow AI Visibility
Summary
Recorded Future has launched regularly refreshed AI infrastructure indicator lists to help security teams identify AI-related network traffic and manage shadow AI, policy enforcement and data exposure risks.
Key points
- The lists cover AI infrastructure and Chinese AI infrastructure, including AI assistants, coding tools, search, voice and video services, and autonomous agents.
- Entries include an indicator, Risk Score, service attribution, verification date and association method; indicators include IP addresses, CIDR ranges and domains.
- The lists are available at no additional cost to eligible Recorded Future Cyber Operations or Threat Intelligence Module customers, via the platform or API.
- Recorded Future recommends checking 30–90 days of historical DNS and proxy logs before enforcement, then using provider attribution and confidence to guide action.
- The article advises prioritizing domain-based filtering because shared CDN IP rules can cause collateral blocking.
- Lists are typically refreshed weekly; daily API retrieval is recommended. Older entries and lower-confidence community-sourced indicators should be revalidated before blocking.
Article Details
- Event Type
- Recorded Future announced the launch of curated AI Infrastructure Indicator Lists for identifying and monitoring AI-related network traffic.
- Impact
- The lists are intended to help security teams discover AI services in use, support policy enforcement and data-loss prevention, and manage AI-related governance risks. They are available to eligible Recorded Future customers at no additional cost and are refreshed regularly, typically weekly.
Vendors
AnthropicAn example indicator may read Anthropic, Verified 2026-09-16, Live JSON.GoogleFor example, Vercel's AI Gateway routes to OpenAI, Anthropic, and Google from one endpoint.OpenAIFor example, Vercel's AI Gateway routes to OpenAI, Anthropic, and Google from one endpoint.Recorded FutureToday, Recorded Future is announcing AI Infrastructure Indicator Lists, curated datasets for security teams to identify, monitor, and implement controls for AI-related network traffic.VercelFor example, Vercel's AI Gateway routes to OpenAI, Anthropic, and Google from one endpoint.
Products
AI Infrastructure Indicator ListsToday, Recorded Future is announcing AI Infrastructure Indicator Lists, curated datasets for security teams to identify, monitor, and implement controls for AI-related network traffic.Attack Surface IntelligenceWith Recorded Future’s Attack Surface Intelligence, organizations can get outside-in discovery that extends to this emerging class of AI and MCP infrastructure, surfacing exposed control panels, open proxies, andOpenClawOpenClaw, a free open-source AI assistant, saw explosive adoption earlier this year with almost no organizational oversight.