Launching today
Trusera Ai-Bom OpenSource (n8n and more)

Trusera Ai-Bom OpenSource (n8n and more)

Launching our Bill of Materials Open Source for developers

2 followers

Visit website
AI-BOM - the first open-source AI Bill of Materials scanner. Shadow AI is the new shadow IT. Developers ship LLM integrations, agent frameworks, and MCP servers with zero security review. AI-BOM finds them all One command 13 scanners. Detects OpenAI, LangChain, CrewAI, MCP servers, and more - including a dedicated n8n community node that scans your AI workflows directly inside n8n Outputs CycloneDX SBOM, SARIF, and 7 more formats. EU AI Act ready Plugs into any CI/CD pipeline pipx install ai-bom
Trusera Ai-Bom OpenSource (n8n and more) gallery image
Free
Launch tags:Developer Tools•Artificial Intelligence•GitHub
Launch Team / Built With
Intercom
Intercom
Startups get 90% off Intercom + 1 year of Fin AI Agent free
Promoted

What do you think? …

trusera
Maker
📌
Hey Product Hunt! I'm Eliad, founder of Trusera. I built AI-BOM because I kept running into the same problem: teams are shipping LLM integrations, agent frameworks, and MCP servers to production with zero visibility. Traditional SBOM tools don't catch any of it. I ran Trivy, Syft, and Grype on repos packed with OpenAI calls and LangChain agents. Clean bill of health every time. That's a real problem, especially with EU AI Act Article 53 enforcement kicking in August 2025. AI-BOM fixes this. One command, ai-bom scan ., runs 13 scanners across your code, Docker configs, cloud IaC, Jupyter notebooks, and even n8n workflows. It detects 25+ AI SDKs across 7 languages, flags exposed API keys, maps everything to OWASP LLM Top 10 categories, and outputs standards-compliant SBOMs (CycloneDX, SPDX, SARIF). The n8n integration was a big one for us. n8n is quickly becoming the backbone of enterprise automation, but those workflows are completely invisible to traditional security tools. Our community node scans every AI node in your n8n instance and generates an interactive dashboard with risk scores, remediation steps, and export options. You can install it directly from the n8n UI. Everything is open source, Apache 2.0. We'd love your feedback on what scanners or integrations to build next. So, what AI tools are hiding in your stack?