AI-SPM

AI Security Posture Management (AI-SPM) gives you visibility, governance, and security oversight of the AI assets in your code. It maps your assets, scores their risk, and helps you enforce governance, so you can maintain compliance and make informed decisions about your AI infrastructure.

AI-SPM assets appear under Inventory > Code.

How AI-SPM works

AI-SPM runs as three agents:

• Map assets: the Discovery agent maps the AI assets across your repositories and applications. To learn more, visit AI asset visibility.

• Assess risk: the Risk intelligence agent scores your assets and evaluates your policies to surface violations and risky usage. To learn more, visit Risk intelligence.

• Enforce governance: the Policy agent governs your assets through policies and issues. To learn more, visit Policies and issues.

Set up AI-SPM

Enable Evo, then import the repositories you want AI-SPM to scan.

To enable Evo, visit Access and authentication. To import repositories, visit AI asset visibility.