Skip to content

msaad00/agent-bom

Vulnerability Scanning

Open security scanner and self‑hosted control plane that discovers assets, scans AI/MCP/cloud infrastructure, maps blast radius, enforces runtime policy via CLI or hosted UI.

Python Latest v0.98.0 · 2d ago Security brief →

Features

  • Scan repositories, images, SBOMs, IaC and AI‑infrastructure for security findings
  • Self‑hosted control plane with UI, tenant‑scoped persistence, attack‑path visualisation and compliance reporting
  • Runtime enforcement via gateway/proxy to allow/warn/block MCP tool calls

Recent releases

View all 125 releases →
Upgrade now
v0.98.0 Maintenance
Dependencies

runtime, cloud, CI, docs, db, deps, UI

Review required
v0.97.5 Mixed
Dependencies

Deploy updates + UI graph enhancements + dep bumps

Review required
v0.97.2 Mixed
Auth Dependencies

Audits update + Demo hardening + Deps bump

Review required
v0.97.1 Mixed
Auth Dependencies

Store‑backed producer, API key binding, parity preservation

Security behavior changed
v0.97.0 Mixed
Auth RBAC

API auth refactor + Graph read/export

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
28
Forks
7
Languages
Python TypeScript JavaScript

Install & Platforms

Install via
pip

Beta — feedback welcome: [email protected]