SBOM Inspector

The SBOM Inspector analyzes Software Bill of Materials to surface a complete component inventory, license posture, and known vulnerabilities. It targets security teams, compliance auditors, and software risk managers who integrate SBOM analysis into build and audit workflows.
Conceptually, the tool parses SPDX and CycloneDX documents or JSON/YAML SBOMs, normalizes component identifiers, matches licenses to approved lists, and queries vulnerability data sources. It then computes a risk score and flags components that require attention. The result includes a structured report, a prioritized remediation list, and export-ready outputs.
Unique value comes from integrated risk scoring, delta analysis between SBOM versions, and policy-driven filtering that reduces noise in large inventories. It supports automated pipelines, repeatable validation, and export-ready outputs for governance, security, and compliance teams.
Core features include multi-format parsing, license normalization, CVE integration, risk scoring, and programmable exports. Typical use cases are license compliance checks in regulated industries, vulnerability management for third-party components, and change tracking across releases.