This tool provides deep security scanning across agentic infrastructure, checking packages, container images, and filesystems for CVEs. It generates SBOMs, verifies provenance via Sigstore, and maps the blast radius of vulnerabilities.