Agent discovery & inventory
Application-security capability that discovers AI assets across the software development lifecycle - AI infrastructure, models, coding assistants, packages and associated secrets - by scanning connected repositories and pipeline systems, then producing an AI bill of materials for governance. Buyer is AppSec; it does not observe business users' AI tool usage.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent discovery & inventory · AI risk & compliance management · Data governance & privacy
Useful conversation with: AppSec manager, CISO, Platform engineering lead.
Demonstrate discovering which AI coding assistants and third-party models our developers introduced last quarter, and show the AIBOM entry with the repository and secret associations.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Automatically discovers and catalogues AI and ML assets across the SDLC including AI infrastructure, models, coding assistants, packages and associated secrets.
Limit: Vendor blog; detection technique per asset class and supported ecosystems are not specified.
Documented by provider
Cycode publicly launched AI and ML Inventory and AIBOM on 21 October 2025 as solutions for discovering, governing and securing AI use across the SDLC.
Limit: The launch blog describes the capability as being in early access at the time of writing; the press release announces launch without stating tier or region availability.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction