AgentIndex icon
AgentIndex
agent-bom logo
agent-bom
★ 35
vs
red-team-blue-team-agent-fabric logo
red-team-blue-team-agent-fabric
★ 32

agent-bom vs red-team-blue-team-agent-fabric

agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.; red-team-blue-team-agent-fabric: The Agent Security Harness is a security testing framework for AI agents, offering 470 executable tests across 32 modules covering MCP, A2A, L402, x402 wire protocols, and decision-layer attack scenarios. It provides active protocol exploitation testing beyond static analysis, with research backing and a focus on both protocol integrity and governance.

01

TL;DR

agent-bom logo
agent-bomSecurity & Safety · ★ 35

CI/CD gating for AI supply chain security

Read agent-bom full review →
red-team-blue-team-agent-fabric logo
red-team-blue-team-agent-fabricSecurity & Safety · ★ 32

Security testing of MCP servers

Read red-team-blue-team-agent-fabric full review →
02

Side-by-Side Comparison

Field
agent-bom logoagent-bom
red-team-blue-team-agent-fabric logored-team-blue-team-agent-fabric
Category
Security & Safety
Security & Safety
Stars
★ 35
★ 32
License
Apache-2.0
Apache-2.0
Install Command
pip install agent-bom
pip install agent-security-harness
Updated
1d ago
5d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
ai-agents, ai-security, ai-supply-chain
a2a-protocol, agent-security, ai-agents
03

Features

agent-bom logoagent-bom
01End-to-end blast radius analysis from CVE to credential exposure
02Multi-entrypoint scanning: agents, images, IaC, packages, cloud
03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles
04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends
05Runtime MCP proxy and gateway for traffic enforcement and audit
red-team-blue-team-agent-fabric logored-team-blue-team-agent-fabric
01470 executable security tests across 32 modules
02Coverage of MCP, A2A, L402, x402 wire protocols
03Three-layer security testing: Protocol Integrity, Operational Governance, Decision Governance
04Research-backed methodology with 5 DOIs and 3 NIST submissions
05MCP server mode for invocation from any AI agent
04

Use Cases

agent-bom logoagent-bom
↳CI/CD gating for AI supply chain security
↳Security team audit of AI agents and MCP servers
↳Self-hosted enterprise security scanning with fleet management
red-team-blue-team-agent-fabric logored-team-blue-team-agent-fabric
↳Security testing of MCP servers
↳Compliance auditing for agent systems
↳Active exploitation testing for enterprise AI platforms
FAQ

FAQ

What is the difference between agent-bom and red-team-blue-team-agent-fabric?
Both agent-bom and red-team-blue-team-agent-fabric are in the Security & Safety category. agent-bom has 35 stars, while red-team-blue-team-agent-fabric has 32 stars.
Which is better, agent-bom or red-team-blue-team-agent-fabric?
The best choice depends on your use case. Choose agent-bom if CI/CD gating for AI supply chain security, and red-team-blue-team-agent-fabric if Security testing of MCP servers.
Is agent-bom free or open source?
Yes, agent-bom is open source on GitHub (Apache-2.0).
Is red-team-blue-team-agent-fabric free or open source?
Yes, red-team-blue-team-agent-fabric is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to agent-bom →Alternatives to red-team-blue-team-agent-fabric →agent-bom details →red-team-blue-team-agent-fabric details →