# AIBOM Diff / Drift Detector — Free Tool

> Compare two AIBOMs — see what models, datasets and licenses changed.

URL: [https://playciso.com/tools/aibom-diff](https://playciso.com/tools/aibom-diff)

The AIBOM Diff tool compares two CycloneDX AI Bills of Materials and shows the drift between them: which model or dataset components were added or removed, which versions changed, and — most importantly — which newly-added components arrived without a license. It is the check you wire into CI so a new non-commercial model or an un-licensed dataset fails the build instead of shipping quietly.

Both documents are parsed entirely in your browser; nothing is uploaded.

## How to use it

- Paste the previous AIBOM on the left and the current one on the right (CycloneDX JSON).
- Read the diff: components added, removed, and version-changed, with newly-added components missing a license called out.
- Gate your pipeline on it — a new license conflict or an un-licensed component is a decision, not a silent change.

## FAQ

### What is AIBOM drift?

AIBOM drift is the change in an AI system’s bill of materials over time — a new model, a bumped version, a swapped dataset, a changed license. Catching drift is how you notice a non-commercial or un-provenanced component entering a product before it becomes an audit finding.

### How does it compare the two BOMs?

It indexes components by name (and version) in each document and reports what was added, removed and version-changed, plus any newly-added component that lacks a license. It works on standard CycloneDX JSON, including model and dataset components.

### Does my data leave the browser?

No. Both AIBOMs are parsed and compared client-side; nothing is uploaded.


---

PlayCISO is a simulation-first platform for security leaders: a War Room incident simulator, a simulated PCI DSS QSA interview, board-report coaching, free security scanners, and a curated library of free courses. https://playciso.com