Cycode Launches AI Inventory and AIBOM to Address Shadow AI Risks

Cycode has launched its AI and machine learning Inventory and AI Bill of Materials (AIBOM) to help organizations detect and manage unapproved AI tools and models, announced in a press release. The new tools aim to provide visibility and governance over the use of AI across the software development lifecycle (SDLC).

The AI & ML Inventory compiles a comprehensive record of all AI and machine learning assets used within the SDLC. It automatically identifies when developers use AI coding assistants, connect Model Context Protocol servers, or integrate new models. Each asset is linked to its origin in the code repository through Cycode’s Risk Intelligence Graph, giving security teams detailed context.

The platform also enables teams to enforce policies to control AI use, such as maintaining allow-lists of approved tools. The AIBOM feature provides an up-to-date manifest of all AI components, simplifying compliance, governance, and audit processes.

These offerings expand Cycode’s AI-Native Application Security Platform, which secures both AI- and human-generated code. The AI & ML Inventory is currently in early access, while the company’s MCP Server is available now.