Snyk Evo Discovery

Snyk Evo Discovery is a security tool designed to identify and inventory AI components within codebases. The tool scans local repositories to detect AI models, agents, MCP servers, datasets, plugins, and other AI-related components that may be present in application code. The primary functionality is delivered through the Snyk AI-BOM CLI, a command-line interface tool that generates an AI Bill of Materials (AI-BOM) from scanned repositories. Users can execute scans using the command "snyk aibom --experimental" on Python projects when using Snyk CLI version 1.1298.3 or later. The tool also offers an API option for programmatic access to AI-BOM scanning capabilities. Evo Discovery focuses on mapping the AI supply chain across applications by identifying various AI components including machine learning models, agent frameworks, datasets, libraries, and plugins. The tool aims to provide visibility into AI adoption within organizations by creating comprehensive inventories of AI assets. The scanning process operates on local repositories and generates reports that catalog discovered AI components. This inventory approach enables organizations to understand what AI technologies are being used across their codebase and assess potential security risks associated with AI supply chain components. The tool is positioned as part of Snyk's broader AI security offering and is currently available through Snyk Labs, which provides early access to emerging security solutions.