AgentIndex icon
AgentIndex
agent-bom logo
agent-bom
★ 35
vs
Sentinelgate logo
Sentinelgate
★ 25

agent-bom vs Sentinelgate

agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.; Sentinelgate: SentinelGate is a self-hosted, container-native, zero-lock-in proxy that intercepts every action of an AI agent before it executes, applying deterministic rules to block unauthorized tool calls, shell commands, and file operations. It provides a full audit trail, content scanning, and session-aware policies, and works with any MCP-compatible client or sandbox.

01

TL;DR

agent-bom logo
agent-bomSecurity & Safety · ★ 35

CI/CD gating for AI supply chain security

Read agent-bom full review →
Sentinelgate logo
SentinelgateSecurity & Safety · ★ 25

Protect against prompt injection attacks by blocking unauthorized tool calls

Read Sentinelgate full review →
02

Side-by-Side Comparison

Field
agent-bom logoagent-bom
Sentinelgate logoSentinelgate
Category
Security & Safety
Security & Safety
Stars
★ 35
★ 25
License
Apache-2.0
AGPL-3.0
Install Command
pip install agent-bom
curl -sSfL https://raw.githubusercontent.com/Sentinel-Gate/Sentinelgate/main/install.sh | sh
Updated
1d ago
6mo ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
ai-agents, ai-security, ai-supply-chain
access-control, ai-agents, ai-security
03

Features

agent-bom logoagent-bom
01End-to-end blast radius analysis from CVE to credential exposure
02Multi-entrypoint scanning: agents, images, IaC, packages, cloud
03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles
04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends
05Runtime MCP proxy and gateway for traffic enforcement and audit
Sentinelgate logoSentinelgate
01Deterministic enforcement with explicit rules
02Content scanning for PII, secrets, and IPI
03Session-aware policies using CEL
04Full audit trail with live streaming
05Identity and access control with API keys and roles
04

Use Cases

agent-bom logoagent-bom
↳CI/CD gating for AI supply chain security
↳Security team audit of AI agents and MCP servers
↳Self-hosted enterprise security scanning with fleet management
Sentinelgate logoSentinelgate
↳Protect against prompt injection attacks by blocking unauthorized tool calls
↳Govern AI agents in sandboxes (Docker, E2B, Kubernetes) with deterministic policies
↳Audit and monitor all agent actions for compliance and security
FAQ

FAQ

What is the difference between agent-bom and Sentinelgate?
Both agent-bom and Sentinelgate are in the Security & Safety category. agent-bom has 35 stars, while Sentinelgate has 25 stars.
Which is better, agent-bom or Sentinelgate?
The best choice depends on your use case. Choose agent-bom if CI/CD gating for AI supply chain security, and Sentinelgate if Protect against prompt injection attacks by blocking unauthorized tool calls.
Is agent-bom free or open source?
Yes, agent-bom is open source on GitHub (Apache-2.0).
Is Sentinelgate free or open source?
Yes, Sentinelgate is open source on GitHub (AGPL-3.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to agent-bom →Alternatives to Sentinelgate →agent-bom details →Sentinelgate details →