Ai Bom

This is the open source discovery scanner from Trusera, a company building security and governance infrastructure for AI agents. The scanner automatically discovers and catalogs the AI agents, models and data pipelines running across an organization's infrastructure, so security teams have an accurate inventory before they try to govern it. It fingerprints and classifies agents, detects shadow AI, feeds a real time inventory dashboard and runs inside CI/CD pipelines after a single pip install, so every pull request can be checked for undeclared AI components, unencrypted agent traffic and policy violations. It is aimed at CISOs preparing for regulatory audits and DevSecOps leads who want AI components covered alongside their existing code scanning. Around the scanner, Trusera offers a policy engine in early access for declarative policy as code, trust scoring, attestation, compliance templates and audit trails, built on Open Policy Agent with a Cedar policy engine on the Enterprise tier. A service mesh for encrypted, policy enforced communication between agents using mutual TLS is marked as coming soon. Exports include CycloneDX and SARIF, and compliance reports cover the EU AI Act and the OWASP LLM Top 10. Pricing is published. Trial is free forever with 5 scans per month, 3 team members, 1,000 API calls per month, the open source CLI and community support on GitHub. Growth costs $499 per month billed monthly, with 20 percent off for annual billing, and adds unlimited scans, 25 team members, 500K API calls per month, SSO, SCIM, SDK interception, webhooks and priority email support, with a 14 day trial. Enterprise is custom priced and adds unlimited usage, an agent kill switch, mesh observability, on premise or VPC deployment and a dedicated SLA. Trusera says data stays in the EU, and discounts are available for qualifying startups and open source projects.