Agent BOM Security Scanner

Example Use Cases

• 1

  Discover and scan AI agents, MCP servers, and cloud services for vulnerabilities.

• 2

  Runtime enforcement and policy-as-code to block malicious tool usage in real time.

• 3

  Audit AI instruction files and ensure compliance with multiple security frameworks.

Description

Agent BOM is a security scanner designed for AI infrastructure and supply chains, providing AI BOM generation, vulnerability scanning, blast radius mapping, runtime proxy enforcement, and compliance framework checks. It auto-discovers MCP client configurations, resolves dependencies, and checks them against multiple vulnerability databases. The tool also offers runtime enforcement with behavioral detectors and audits AI instruction files for trustworthiness, helping to prevent supply chain attacks. It supports 32 MCP-compatible AI assistant tools and integrates with cloud and container environments.