agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure.

15 package ecosystems · 16 compliance surfaces · 81 MCP tools · no account required
Quick start · Live demo · Docs

Scan, correlate, and act

agent-bom scans repositories, developer endpoints, images, clusters, cloud and data platforms, MCP servers, and runtime activity, then normalizes the evidence into one Finding + UnifiedGraph model for prioritized investigation and action.

• Start locally or in CI: produce findings, SARIF, SBOMs, HTML reports, and graph exports without an account.
• Centralize when ready: self-host fleet, browser, compliance, and audit evidence inside your cloud and identity boundary.
• Act with context: follow Path → Impact → Owner → Fix → Verify, then export, rescan, or enforce at runtime.
• Keep evidence honest: raw source and credentials stay local; collected, inferred, static, and runtime relationships stay distinct, while partial and unavailable evidence remains explicit.

See how the evidence workflow works for commands, artifacts, and the boundary between collected, partial, and unavailable state.

Who it is for

Security engineering and GRC remain separate workflows: findings and reachability are not presented as audit certification. See product boundaries.

Product gallery

The gallery uses deterministic sample data, visibly labeled in the UI. It is product-state proof, not customer or advisory evidence.

Overview	Findings

Quick start

Start here. This is the front door — two commands, no account, no config. Every other surface below (demo, self-host, Docker, Helm, MCP, CI action, SDKs) is an expansion path you reach for once this works.

pip install agent-bom
agent-bom scan .

The console shows inventory, findings, and reachable impact. agent-bom scan . and agent-bom scan -p . are the same command; PATH is an alias for --project.

A non-zero exit is a verdict, not a crash. scan exits 0 when nothing matched a gate, and 1 when one did — a --fail-on-* threshold you set, a known-malicious package, or a scan that did not complete. The report is printed in full either way, and the last line names the gate that matched. Full exit-code contract.

Save an artifact with agent-bom scan . -f sarif -o findings.sarif, or follow the first-run guide for formats and CI use.

agent-bom scan --demo --offline

Self-host

Start the loopback control plane:

pip install 'agent-bom[ui]'
agent-bom serve

For a shared deployment, use the documented Docker or Helm path and configure real identity, TLS, PostgreSQL, encryption, and audit keys before exposing it.

Examples target this release candidate; confirm release availability before copying an exact pin. Otherwise, use the latest version shown on PyPI.

Deployment overview · Enterprise configuration · Cloud connections

Trust

• Read-only discovery by default; runtime write decisions are separate and explicit.
• Credentials are write-only where stored, encrypted at rest, and never returned by API responses.
• API and control-plane routes are tenant scoped and auth protected outside explicit local mode.
• Missing evidence is shown as unavailable or partial, never converted into a factual zero.
• Public examples and screenshots use deterministic synthetic identifiers only.

Threat model · Release verification · Security policy · MCP security model

Contributing and support

Stuck, or not sure where a question belongs? SUPPORT.md has the routing and an honest statement of what response to expect.

To contribute, start with CONTRIBUTING.md, AGENTS.md, and the open issues.

Apache-2.0 licensed.