AgentIndex icon
AgentIndex
agent-bom logo
agent-bom
★ 35
vs
attestix logo
attestix
★ 846

agent-bom vs attestix

agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.; attestix: Attestix provides cryptographically verifiable proof for AI agents to comply with the EU AI Act. It combines agent identity, compliance automation, and verifiable credentials in one open-source protocol. With 47 MCP tools across 9 modules, it enables identity creation, compliance checks, and audit trails.

01

TL;DR

agent-bom logo
agent-bomSecurity & Safety · ★ 35

CI/CD gating for AI supply chain security

Read agent-bom full review →
attestix logo
attestixSecurity & Safety · ★ 846

Make any AI agent EU AI Act compliant with machine-readable proof

Read attestix full review →
02

Side-by-Side Comparison

Field
agent-bom logoagent-bom
attestix logoattestix
Category
Security & Safety
Security & Safety
Stars
★ 35
★ 846
License
Apache-2.0
Apache-2.0
Install Command
pip install agent-bom
pip install attestix
Updated
1d ago
1d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
ai-agents, ai-security, ai-supply-chain
agent-identity, ai-agents, attestation
03

Features

agent-bom logoagent-bom
01End-to-end blast radius analysis from CVE to credential exposure
02Multi-entrypoint scanning: agents, images, IaC, packages, cloud
03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles
04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends
05Runtime MCP proxy and gateway for traffic enforcement and audit
attestix logoattestix
01Unified Agent Identity (UAITs) bridging multiple identity protocols
02EU AI Act compliance automation with risk profiles and assessments
03W3C Verifiable Credentials with Ed25519 signatures
04Hash-chained audit trail for provenance and accountability
05Blockchain anchoring on Base L2 via Ethereum Attestation Service
04

Use Cases

agent-bom logoagent-bom
↳CI/CD gating for AI supply chain security
↳Security team audit of AI agents and MCP servers
↳Self-hosted enterprise security scanning with fleet management
attestix logoattestix
↳Make any AI agent EU AI Act compliant with machine-readable proof
↳Establish verifiable identity and reputation for autonomous agents
↳Generate signed compliance documentation for regulatory audits
05

Best For

agent-bom logoagent-bom
—
attestix logoattestix
Trending
FAQ

FAQ

What is the difference between agent-bom and attestix?
Both agent-bom and attestix are in the Security & Safety category. agent-bom has 35 stars, while attestix has 846 stars.
Which is better, agent-bom or attestix?
The best choice depends on your use case. Choose agent-bom if CI/CD gating for AI supply chain security, and attestix if Make any AI agent EU AI Act compliant with machine-readable proof.
Is agent-bom free or open source?
Yes, agent-bom is open source on GitHub (Apache-2.0).
Is attestix free or open source?
Yes, attestix is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to agent-bom →Alternatives to attestix →agent-bom details →attestix details →