nuguard
AI-SBOM generation, static analysis, and automated red-teaming / adversarial-attack-generation for AI agents and applications.
What it does · See it in action · Framework coverage · Comparison · Getting started · FAQ
NuGuard is an open source AI application safety & security toolkit. It generates an AI Software Bill of Materials (AI-SBOM) for your agentic application, statically analyzes it for structural risk in the AI Stack and the software infrastructure. It then red-teams a sandboxed instance with a catalog of 100+ adversarial scenarios — prompt injection, tool abuse, data exfiltration, and more — so you find the issues before an attacker does. An automated judge evaluates the findings based on their impact and provides actionable remediation guidance.
What It Does
See It In Action
A real scan of a live fintech agent — Pinnacle Bank Assistant — walking through all five NuGuard stages: AI-SBOM, Cognitive Policy, Static Analysis, Behavior, and Red-Team. No mocks, no slides — real findings, including a live transcript of the agent leaking another customer's flagged fraud transactions on a routine question.
→ Open the interactive demo — scroll through the full walkthrough yourself.
Framework Coverage
NuGuard's AI-SBOM extractor understands framework-specific code, not just generic regex — it recognizes agent/tool/model declarations natively across:
| Language | Frameworks |
|---|---|
| Python | LangChain, LangGraph, OpenAI Agents SDK, CrewAI (code + YAML), AutoGen (code + YAML), Google ADK, LlamaIndex, Agno, AWS BedrockAgentCore, Azure AI Agent Service, Azure Semantic Kernel, Guardrails AI, MCP Server (FastMCP + low-level) |
| TypeScript / JavaScript | LangChain.js, LangGraph.js, OpenAI Agents (TS), Azure AI Agents (TS), Agno (TS), MCP Server (TS) |
| Go | LangChainGo, Eino, Genkit, Anthropic SDK, OpenAI SDK, Google GenAI, MCP Server, net/http, Gorilla Mux, gqlgen |
| C# | Azure Semantic Kernel, ASP.NET Core, ML.NET |
Beyond the AI stack itself, the supply-chain/infrastructure analysis covers:
| Category | Coverage |
|---|---|
| Infrastructure & Configuration | Terraform, CloudFormation, Azure Bicep, Kubernetes manifests, GCP Deployment Manager, GitHub Actions, Dockerfiles, Nginx configs |
| Data & Storage | SQL schemas (PHI/PII classification), SQLAlchemy models, Django models, Pydantic models, prompt files (.txt/.md/.jinja) |
| Output formats | SARIF, CycloneDX, SPDX, Markdown |
See the full framework matrix for details.
Comparison
Getting Started
Install, then generate an SBOM, statically analyze it, and red-team a live target:
pip install nuguard
nuguard init --target <your-app-url>
nuguard sbom generate --source <path-to-your-app> --output app.sbom.json
nuguard analyze --sbom app.sbom.json --format markdown
nuguard redteam --config nuguard.yaml --format markdown --output reports/redteam.md
🚀 Ready to run NuGuard?
Installation, the full CLI surface, and the configuration reference — all in one guide.
🤖 Using Claude Code?
Install the NuGuard plugin and run SBOM, analysis, behavior, and red-team scans directly from Claude Code or Claude Desktop.
Hosted Version
Running NuGuard at organizational scale? The managed SaaS adds what a CISO or VP Engineering needs on top of everything in this repo — no infra to stand up or maintain.
|
NuGuard.ai — Managed SaaS for Security & Engineering Leaders
Free trial available — no credit card required. |
Contributing
🤝 Want to contribute?
Dev setup, running tests and lint, and the pull request process are covered in the Contributing guide.
Release publication is managed by repository maintainers. See Governance for ownership and the release runbook for the maintained procedure.
Repo Notes
- The repository currently contains example applications under
tests/apps/ - LLM-assisted features depend on provider credentials being available via environment variables
FAQ
I have some questions, how do I reach out to folks behind this repo? You can contact us at oss@nuguard.ai For bug reporting, use the issues page on GitHub.
Do I need a live app to do a security assessment?
No. nuguard sbom + nuguard analyze find structural and supply-chain risks based on the SBOM (no source code or running application required).
nuguard behavior and nuguard redteam need a running target typically in a sandbox.
Which LLM providers are supported for LLM-assisted features?
Configured via the llm section of nuguard.yaml; provider credentials are read from environment variables. Lite LLM is used to abstract any llm provider.
For redteam scenarios, an LLM with adversarial content tolerance is required to generate attack payloads effectively. The SaaS version of nuguard provides a pre-configured LLM for this purpose, ensuring consistent and reliable red-team assessments.
What if I don't want to run all redteam scenarios?
Filter by profile (CI, Standard, Full), and configure destructive or non-destructive scenarios. Alternatively, set enabled: false per scenario in a catalog exported with nuguard redteam catalog-export.
License
Docs: Getting started / Quick start · CLI reference · Policy engine · Static analysis · Red-team Guide · Claude plugin · Troubleshooting · Security · Contributing · Governance
1 maintainer
Metadata
1 maintainer
Release files for nuguard 0.9.7
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| nuguard-0.9.7.tar.gz | 1.6 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| nuguard-0.9.7-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 3.4 MB
Release files / nuguard-0.9.7.tar.gz
| Download URL | nuguard-0.9.7.tar.gz |
|---|---|
| Size | 1.6 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
99b3454cccc77e6a6ec2aac416d7bbaca7d7286f253c04206e4bf2d38d2588ae
|
|
BLAKE2b-256 checksum How to use checksums |
a4745c2f4d395c88968db2bc22e197a77388c88562a95ad1e493ddd2fa0c82ec
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 14, 2026.
Transparency logRelease files / nuguard-0.9.7-py3-none-any.whl
| Download URL | nuguard-0.9.7-py3-none-any.whl |
|---|---|
| Size | 1.9 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
198adacd8d50ffa54573531607686b4f0bd2f00a2ddd59a75c6ff4d1de1ef6b9
|
|
BLAKE2b-256 checksum How to use checksums |
20c96e08d0cc5144790f92bd40ca58688b73f7fa0a8888513eff779703a16afd
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 14, 2026.
Transparency log
