SBOM / dependency-file scan
Upload an SBOM or a common dependency file — format is auto-detected.
Scanning needs a free account — one email, no card. Sign in to upload here, or send the file to POST /v1/sbom/scan with your API key.
Supported formats
CycloneDX (JSON/XML) · SPDX 2.3+ JSON · package.json · package-lock.json · yarn.lock · pnpm-lock.yaml · requirements.txt · Pipfile.lock · pyproject.toml · uv.lock · poetry.lock · go.mod · go.sum · Cargo.lock · Gemfile.lock · composer.lock · Excel (.xlsx) · CSV/TSV
Want to keep getting this result without re-uploading? Register an SBOM watch and get an email when new advisories land →