Agent Bom

Agent Bom is an open-source security scanner and self-hosted control plane designed for security, AppSec, and GRC teams that need to discover, scan, analyze, and secure AI agents, MCP servers, software supply chains, and critical cloud infrastructure. It centralizes inventory, graph evidence, vulnerability and compliance findings, and provides remediation guidance for environments spanning code repositories, containers, Kubernetes, and cloud accounts. Agent Bom supports offline and CI/CD workflows, integration with existing tools, and enforces policy at runtime through proxies or gateways.