Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
<a href="#agent-sdks">SDKs</a>&ensp;&middot;&ensp;
<a href="#n8n-community-node">n8n Node</a>&ensp;&middot;&ensp;
<a href="#cicd-integration">CI/CD</a>&ensp;&middot;&ensp;
<a href="#comparison">Compare</a>&ensp;&middot;&ensp;
<a href="docs/comparison.md">Compare</a>&ensp;&middot;&ensp;
<a href="#architecture">Docs</a>
</div>

Expand Down Expand Up @@ -306,6 +306,7 @@ That's it. The node fetches all workflows, scans them, and serves an interactive
- Optional password protection (AES-256-GCM encrypted, client-side decryption)

---
> Looking for AI-BOM ecosystem comparisons? See [AI-BOM Tool Comparison](docs/comparison.md).

## Comparison

Expand Down
98 changes: 98 additions & 0 deletions docs/comparison.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,98 @@
\# AI-BOM Tool Comparison



This document compares \*\*ai-bom\*\* with other AI Bill of Materials tools currently available in the ecosystem.



The goal is to help users understand feature differences and choose the right tool for their workflow.



---



\## Feature Comparison



| Feature | ai-bom | Cisco AIBOM | Snyk AIBOM |

|--------|--------|-------------|-----------|

| License | Apache 2.0 | Apache 2.0 | Proprietary |

| Open Source | Yes | Yes | No |

| Scanners | 13+ (code, cloud, Docker, GitHub Actions, Jupyter, MCP, n8n, etc.) | 1 (Python-focused) | Unknown |

| Output Formats | 9 (Table, JSON, SARIF, SPDX, CycloneDX, CSV, HTML, Markdown, JUnit) | JSON, CSV | Unknown |

| CI/CD Integration | GitHub Action, GitLab CI | No | Yes |

| LLM Enrichment | No | Yes | Unknown |

| n8n Scanning | Yes | No | No |

| MCP / A2A Detection | Yes | No | No |

| Agent Framework Detection | LangChain, CrewAI, AutoGen, LlamaIndex, Semantic Kernel | Limited | Unknown |

| Binary Model Detection | Yes (.onnx, .pt, .safetensors, etc.) | No | Unknown |

| Policy Enforcement | Cedar policy gate | No | Yes |



---



\## Notes



\### ai-bom



\- Open-source AI Bill of Materials scanner focused on discovering AI/LLM usage across codebases and infrastructure.

\- Supports multiple scanners, formats, and compliance mappings (OWASP Agentic Top 10, EU AI Act).

\- Designed for developer workflows with CLI, CI/CD, and dashboard support.



\### Cisco AIBOM



\- Open-source tool focused primarily on Python projects.

\- Uses LLM-based enrichment to extract model usage.

\- Limited scanner coverage and output formats compared to ai-bom.



\### Snyk AIBOM



\- Proprietary feature integrated into Snyk platform.

\- Provides CI/CD integration.

\- Public documentation on supported scanners and formats is limited.



---



\_Last updated: 2026\_