{
  "title": "Five AIBOM Tools Compared",
  "method": "Documentation-based comparison; no hands-on product benchmark",
  "evidenceCutoff": "2026-09-01",
  "statusLegend": {
    "documented": "Explicitly supported by current official documentation at the research cutoff.",
    "partial": "Supported for a narrower scope, format or workflow than the comparison axis.",
    "not-public": "Not established in the public sources reviewed; this does not prove the feature is absent."
  },
  "tools": [
    {
      "id": "aibomgen-cli",
      "name": "AIBoMGen CLI",
      "publisher": "IDLab, Ghent University and imec",
      "delivery": "Open-source Go CLI",
      "license": "AGPL-3.0",
      "version": "v0.2.1; repository active at cutoff",
      "scenarioFit": ["Hugging Face model intake", "AIBOM and SBOM merge", "Completeness review"],
      "disqualifiers": ["Your main inventory problem is agent, prompt, MCP or live-cloud discovery outside Hugging Face workflows."],
      "sources": ["S03"],
      "axes": {
        "discovery": {"status": "partial", "detail": "Scans repositories for Hugging Face model and dataset references across several file types; it is not documented as a live-cloud or runtime discovery platform.", "sourceIds": ["S03"]},
        "aiCoverage": {"status": "partial", "detail": "Focused on Hugging Face models and datasets, with security-scan metadata; prompts, general agent graphs and MCP components are outside the documented core.", "sourceIds": ["S03"]},
        "outputs": {"status": "documented", "detail": "Generates and validates CycloneDX JSON or XML, supports versions 1.4 through 1.6, and can merge one or more AIBOMs into an existing SBOM.", "sourceIds": ["S03"]},
        "provenance": {"status": "partial", "detail": "Captures hub metadata, linked datasets, completeness and vulnerability evidence, but cryptographic signing and attestation issuance are not documented CLI functions.", "sourceIds": ["S03"]},
        "cicd": {"status": "documented", "detail": "A companion GitHub Action is documented for automated generation, and strict validation can fail on missing required fields or a minimum completeness score.", "sourceIds": ["S03"]},
        "policy": {"status": "partial", "detail": "Strict validation and completeness thresholds provide a build gate, but a general authorization or policy-as-code engine is not documented.", "sourceIds": ["S03"]}
      }
    },
    {
      "id": "cisco-ai-bom",
      "name": "Cisco AI BOM",
      "publisher": "Cisco AI Defense",
      "delivery": "Open-source Python CLI",
      "license": "Apache-2.0",
      "version": "1.10.0 released 2026-08-17",
      "scenarioFit": ["Polyglot source discovery", "Container and cloud inventory", "Agent and MCP inventory"],
      "disqualifiers": ["You cannot permit the configured LLM dependency required by the documented agentic classification workflow."],
      "sources": ["S01"],
      "axes": {
        "discovery": {"status": "documented", "detail": "Scans source code, container images and cloud environments, with documented language support across Python, JavaScript or TypeScript, Java, Go, Rust, Ruby and C#.", "sourceIds": ["S01"]},
        "aiCoverage": {"status": "documented", "detail": "Inventories models, agents, tools, MCP servers and clients, datasets, prompts, guardrails, secrets and other AI assets detected in software.", "sourceIds": ["S01"]},
        "outputs": {"status": "documented", "detail": "Official examples document terminal, JSON and CSV outputs; the public comparison should not assume broader standards export without confirming the selected release.", "sourceIds": ["S01"]},
        "provenance": {"status": "partial", "detail": "Maps discovered assets and cross-references with source evidence, but public documentation reviewed does not establish signed attestations for generated inventories.", "sourceIds": ["S01"]},
        "cicd": {"status": "partial", "detail": "The CLI is scriptable, yet the reviewed release documentation does not present a first-party CI template equivalent to a documented GitHub Action workflow.", "sourceIds": ["S01"]},
        "policy": {"status": "partial", "detail": "Risk and authorization context can be derived from the inventory, but a general production policy-as-code gate is not established in the reviewed public documentation.", "sourceIds": ["S01"]}
      }
    },
    {
      "id": "mend-ai-bom",
      "name": "Mend AI-BOM",
      "publisher": "Mend.io",
      "delivery": "Commercial platform and CLI-assisted scan",
      "license": "Commercial; entitlement required",
      "version": "AI-BOM report released 2026-08-24",
      "scenarioFit": ["Organization-wide reporting", "Application and project inventory", "Existing Mend governance workflow"],
      "disqualifiers": ["You need a no-account, fully local generator or need framework libraries and vulnerability records inside the same AI-BOM export."],
      "sources": ["S06", "S07"],
      "axes": {
        "discovery": {"status": "documented", "detail": "Uses completed Mend AI repository scans and can generate reports at organization, application, project or label scope from the platform or API.", "sourceIds": ["S06", "S07"]},
        "aiCoverage": {"status": "documented", "detail": "Models are included by default; eligible subscriptions add system prompts, agent configurations, agents, tools and MCP components when detected.", "sourceIds": ["S06", "S07"]},
        "outputs": {"status": "documented", "detail": "Exports JSON as CycloneDX 1.7 or SPDX 3.0.1, with one AI-BOM per eligible repository snapshot and ZIP packaging for multiple snapshots.", "sourceIds": ["S06"]},
        "provenance": {"status": "partial", "detail": "Includes file and line evidence where available plus hashes and metadata, but raw prompt or configuration content is excluded and signed attestations are not documented.", "sourceIds": ["S06"]},
        "cicd": {"status": "documented", "detail": "Mend CLI and repository integrations initiate scans; an asynchronous API creates reports after completed scans, fitting established platform pipelines.", "sourceIds": ["S06", "S07"]},
        "policy": {"status": "documented", "detail": "The platform documents entity triage states, suppressions with audit trail, model-usage and licensing governance workflows, subject to product entitlement.", "sourceIds": ["S07"]}
      }
    },
    {
      "id": "owasp-aibom-generator",
      "name": "OWASP AIBOM Generator",
      "publisher": "OWASP GenAI Security Project",
      "delivery": "Open-source hosted web tool",
      "license": "Apache-2.0",
      "version": "Hugging Face Space commit 6165ba9; last modified 2026-03-12",
      "scenarioFit": ["Single Hugging Face model review", "AIBOM field education", "Completeness demonstration"],
      "disqualifiers": ["You require continuous multi-repository discovery, enterprise RBAC, a CI policy gate or private artifact handling without first validating the hosting boundary."],
      "sources": ["S04", "S05"],
      "axes": {
        "discovery": {"status": "partial", "detail": "Accepts Hugging Face-hosted models and extracts model metadata; it is not documented as a general source, container, cloud or runtime scanner.", "sourceIds": ["S04", "S05"]},
        "aiCoverage": {"status": "partial", "detail": "Covers model metadata and dependencies available for a selected Hugging Face model; general prompts, agents, MCP and shadow-AI discovery are not documented.", "sourceIds": ["S04"]},
        "outputs": {"status": "documented", "detail": "Provides an AIBOM JSON download in CycloneDX format aligned with SPDX conventions, alongside a human-readable visualization.", "sourceIds": ["S04"]},
        "provenance": {"status": "partial", "detail": "Exposes model metadata, field coverage and missing-field completeness, but no signed attestation or independent verification chain is documented.", "sourceIds": ["S04"]},
        "cicd": {"status": "not-public", "detail": "A public interactive Space is documented; a first-party supported CI integration was not established in the reviewed official project materials.", "sourceIds": ["S04", "S05"]},
        "policy": {"status": "not-public", "detail": "Completeness scoring supports review, but an enforceable policy engine, approval workflow or deployment gate is not documented.", "sourceIds": ["S04"]}
      }
    },
    {
      "id": "trusera-ai-bom",
      "name": "Trusera ai-bom",
      "publisher": "Trusera",
      "delivery": "Open-source Python CLI with optional platform",
      "license": "Apache-2.0",
      "version": "v3.1.0 released 2026-02-12; repository active at cutoff",
      "scenarioFit": ["Broad developer-side discovery", "GitHub or GitLab policy gate", "AI agent and workflow inventory"],
      "disqualifiers": ["Your primary requirement is vulnerability scanning for OS packages or complete training-data lineage rather than source-visible AI component discovery."],
      "sources": ["S02"],
      "axes": {
        "discovery": {"status": "documented", "detail": "Documents 13 scanner classes across code, model files, Docker, cloud IaC, network, notebooks, GitHub Actions, n8n and MCP configuration.", "sourceIds": ["S02"]},
        "aiCoverage": {"status": "documented", "detail": "Detects LLM providers, model references, agent frameworks, MCP, A2A, n8n nodes, AI containers, cloud AI resources and model-file extensions.", "sourceIds": ["S02"]},
        "outputs": {"status": "documented", "detail": "Documents CycloneDX 1.6, SPDX 3.0, SARIF 2.1.0, HTML, Markdown, CSV, JUnit and terminal outputs with schema validation.", "sourceIds": ["S02"]},
        "provenance": {"status": "partial", "detail": "Preserves source findings and risk properties in generated artifacts, but deep training-data lineage and signed attestation issuance are not documented as core scanner outputs.", "sourceIds": ["S02"]},
        "cicd": {"status": "documented", "detail": "Provides a GitHub Action, GitLab CI template, SARIF upload examples and fail-on severity controls for build pipelines.", "sourceIds": ["S02"]},
        "policy": {"status": "documented", "detail": "Supports threshold policies, blocked flags or providers and a Cedar policy gate; standalone SDK mode can enforce local runtime HTTP policies.", "sourceIds": ["S02"]}
      }
    }
  ]
}