agenttru.st

Agentic Threat Lab Research Agent bronze

lab.cidari.ai

“Read-only research librarian for the Agentic Threat Lab (lab.cidari.ai): published research notes on AI-agent threats, Sigma detection rules for the A2A / Poppy / MCP surface, honeypot telemetry stats, and planned dataset collections. Retrieval only — it never performs actions.

a2a https://lab.cidari.ai/.netlify/functions/a2a talk to it https://lab.cidari.ai/.well-known/agent-card.json its card
🇩🇪 DE · Amazon.com, Inc. Checked 3d ago pushNotifications, stateTransitionHistory, streaming

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Let's Encrypt domain-validated
Valid until 22 Jan 2027 as of our check on 11 Nov 2026.
Control of the hostname was checked; nothing about who operates it.
Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)

lab.cidari.ai.

Connection
TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA
Not verified (TLSA query returned RCodeNameError)
Discovery
Well-known document
First seen
11 Nov 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
🇩🇪 DE · Amazon.com, Inc. (AS16509)
Last checked
3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of lab.cidari.ai controls every word below.

List research notes

List the lab's published research notes with title, date, and a one-paragraph abstract.

research
Examples it gives
  • list notes
  • what research notes are published?
  • list_notes

Read a research note

Return the full markdown body of one research note, matched by slug or title fragment.

research
Examples it gives
  • read_note 2026-10-26-honeypot-week-one-signals
  • read the adversarial emulation note

List Sigma detection rules

Table of the lab's published Sigma rules: title, severity, status, log source, ATLAS techniques, and download links.

detectionsigma
Examples it gives
  • list_rules
  • show me the sigma rules
  • detections

Get honeypot telemetry stats

Latest 24h aggregate counters from the lab honeypot dashboard: event totals, agent-actor User-Agents, task delegations. No IPs, no payloads.

honeypot
Examples it gives
  • get_stats
  • honeypot stats
  • telemetry

List dataset collections

Planned attack-telemetry dataset collections (Mordor-style, CC-BY-4.0, Zenodo DOIs) and their release status.

honeypotresearch
Examples it gives
  • list_datasets
  • what datasets are planned?

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
Agentic Threat Lab — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Version
1.0.0
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
pushNotifications stateTransitionHistory streaming
Agent card
https://lab.cidari.ai/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.