AIBOM drift is the change in an AI system’s bill of materials over time — a new model, a bumped version, a swapped dataset, a changed license. Catching drift is how you notice a non-commercial or un-provenanced component entering a product before it becomes an audit finding.

How does it compare the two BOMs?

It indexes components by name (and version) in each document and reports what was added, removed and version-changed, plus any newly-added component that lacks a license. It works on standard CycloneDX JSON, including model and dataset components.

Does my data leave the browser?

No. Both AIBOMs are parsed and compared client-side; nothing is uploaded.

Free tool · no signup · runs in your browser

AIBOM Diff / Drift Detector

Paste two CycloneDX AIBOMs — before and after — and see what changed: models & datasets added or removed, versions bumped, and new components missing a license. Nothing is uploaded.

Previous AIBOM

Current AIBOM

Wire it into CI. Generate AIBOMs with the free ML-BOM Converter, validate them with the AIBOM Validator, and screen any new license with the Model License Checker.

AIBOM Diff / Drift Detector

Practice & Coaching

Simulations

PCI DSS

Studios

Scanners & Library

Arcade

Stay Lowkey 🔒

Community

Get Started Free