See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.

Transilience — Shasta is the open-source pre-GA AI and Cloud Security platform. Supports GCP, AWS, and Azure and 14 security & compliance frameworks

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

AI BOM example. A simple sentiment analysis application, published solely as an artifact for the purpose of demonstrating a software bill of materials. Not recommended for any serious text classification task.

AI-aware dependency security scanner — 45 scanners: prompt injection, slopsquatting, MCP auditing, anti-analysis evasion, AI-BOM, supply chain attack detection, SBOM generation

AI-BOM Schema Visualizer

A CLI tool and GitHub Action to generate an AI Bill of Materials (AI-BOM) from a model project directory.

Vouchsafe — deterministic, signed AI/LLM/agent/MCP inventory scanner. Install: see README. Source: kgovind-coder/vouchsafe-source (private).

Model integrity and provenance verification for LLMs and AI models. Generate, verify, and cryptographically secure your model artifacts.

Generate an AI bill of materials for models, MCP servers, tools, datasets, vector stores, and external APIs.

AIXV helps organizations answer high-stakes questions before deploying or accepting AI artifacts

AI Bill of Materials MCP in CycloneDX + SPDX format. Required by EU AI Act Article 11. MIT

AI Bill of Materials generator + EU AI Act / ISO 42001 / NIST AI RMF compliance triage — from the command line