agent-bom

AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. For AppSec and platform engineers. Self-host free; local scans need no account. Quick start · All integrations · Sample graph · Self-host · Product tour · Docs Quick start From the repository you want to...

Agentic-Evidence

Agentic Evidence Security Evidence and Observability for Agentic AI Agentic Evidence is an OWASP open-source reference project exploring how to collect, correlate, and evaluate security evidence for agentic AI execution. Agent observability can show that an event was logged. A security...

Operationalize AI Governance Across Shadow GenAI, MCP, and Agentic Workloads with Qualys TotalAI

Key Takeaways AI adoption has outpaced enterprise controls, with AI and LLM workloads appearing faster than security teams can inventory or approve them. AI governance has become an evidence problem. Policies, questionnaires, and risk registers cannot prove that AI systems are safe. Traditional...

Scribe Platform: End-to-end Software Supply Chain Security

As software supply chain security becomes more and more crucial, security, DevSecOps, and DevOps teams are more challenged than ever to build transparent trust in the software they deliver or use. In fact, in Gartner recently published their 2022 cybersecurity predictions - not only do they...

Forced Password Reset? Check Your Assumptions

Almost weekly now I hear from an indignant reader who suspects a data breach at a Web site they frequent that has just asked the reader to reset their password. Further investigation almost invariably reveals that the password reset demand was not the result of a breach but rather the site's...