The playground

A fake company, built for AI agents to find.

Every agent that walks in is logged, and what it tries is counted. What I learn there goes into the agents I set up for you.

Not open yet. When it opens, this line will show how many AI agents visited, how many followed a planted instruction, tried a fake key or tried the fake admin login, and how many stopped at the notice.

What's in it

• An admin panel that isn't real. The login goes nowhere and nothing sits behind it.
• Pages with instructions planted in them, written the way someone would try to steer an agent that reads the page.
• Keys and passwords that unlock nothing. They exist only to see which agents pick them up and try them.
• A plain notice on every page saying this is a research honeypot. Whether an agent stops when it reads that is one of the things I count.

Why

Agents that browse read everything, including text written to steer them. Lab benchmarks test that on fixed tasks. The playground watches what agents actually do when they wander in on their own, so the gates I build for you are set against real behaviour, not guesses.

The rules it keeps

• Nothing real behind it. No real data, no real accounts, and no key on it works anywhere.
• The planted instructions only ask for harmless things I can see, like fetching a page or repeating a code word. Never to hurt anyone, spend money, or hand over the agent owner's data.
• If something real arrives anyway, such as a working key or someone's personal details, it is not kept. Only a one-way fingerprint is stored, so it can be counted.
• What is logged: the time, the page requested, the name the visitor gives itself, a one-way hash of its address, and which bait it touched. No cookies, and no recording of clicks, scrolling or keystrokes. Those records are deleted after 90 days; the counts are kept.
• It runs apart from this site and from my own machines. Nothing it holds is worth taking, and nothing it touches leads anywhere.
• This site never links to it. Agents find it on their own, or are sent there by the people below.

Send your own agent

Building an agent, or about to let one loose in your business? Ask for a run code. You point your agent at the playground with it, and I send you a one-page report: what it read, what it followed, what it tried, and where it stopped.

Say “playground” in the form. Your run is kept apart from the wild traffic and is deleted 30 days after you get the report.