msaad00/agent-bom

For AppSec and platform engineers responsible for AI agents and MCP servers:
scan a repository, correlate its findings with agent and infrastructure context,
and prioritize fixes using blast radius and reachability evidence.
**Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure.** Local scans need no account.
Quick start ·
Sample graph ·
Self-host ·
Product tour ·
Docs
Quick start
From the repository you want to inspect:
Read the inventory, findings, coverage gaps, and remediation guidance in the terminal.
Save a report with agent-bom scan . -f sarif -o findings.sarif, then
upload it and gate CI.
Run agent-bom doctor if setup fails. See the first-run guide.
No project handy? Run agent-bom scan --demo --offline for a bundled sample.
Exit 1 is expected: the sample trips the security gate. A non-zero exit
can mean a security gate or incomplete assessment; inspect the report and coverage.
See the exit codes.
The recording uses labeled sample data and bundled advisories. Credential
references are names, not secret values. Recorded relationships do not prove
exploitation or successful data access.
Investigate context and exposure
**Which agent uses the vulnerable component? What could it reach? What evidence supports that path?**
Correlate retained scans by exact, tenant-scoped identities; trace the recorded
blast radius from each agent through its MCP servers to packages, findings,
credentials and data stores. Inspect each relationship's source and evidence
kind, then rescan the same scope to check what changed.
*Fictional sample estate. Dashed use, credential and access links are configured
or modeled, not observed at runtime; path analysis covers the collected snapshot only.*
**From agent to verified fix:** select Document Intake Agent → inspect
CVE-2023-4863 (high, KEV-listed) and the evidence on each arrow → take the
proposed remediation →
rescan the changed pin and compare snapshots.
The comparison verifies the changed input, not a running deployment.
**Supporting evidence: one package, three parsed inputs.** A repository pin, an
image SBOM and a modeled Kubernetes workload resolve to one pillow@9.0.0. The
image inventory and the deployment occurrence stay separate nodes; the advisory
receipt is open.
*Real parsers, modeled infrastructure; a graph path does not prove exploitation.*
Explore context, correlation and reachability · Run the reference lab · Reproduce these screenshots
Repository and cloud investigations
Trace source imports, deployment configuration and CI to a published container
and its vulnerable packages:
Follow a public API gateway into a vulnerable workload, its role and a PII bucket:
Open the sample graph
Run the server command it prints, then open its graph URL. Offline quickstart
skips package-CVE lookup, so zero CVEs is not a clean verdict; use the bundled
demo for advisory-backed findings or populate the advisory database.
Self-host in your environment
**Your infrastructure, identity, database, and audit boundary.** Start a local