SBOM Viewer

The SBOM Viewer Online ingests SBOM files in SPDX and CycloneDX formats and presents a structured view of software components, their licenses, and dependencies.
Conceptually it normalizes diverse formats into a common data model, builds a dependency graph, and exposes search and filter capabilities to reveal risk-prone areas.
This facilitates governance, license compliance, and inventory awareness for developers, security engineers, and compliance officers.
Core features include multi-format ingestion, field normalization (name, version, supplier, license, hash, and identifiers), topological dependency mapping, and export options for downstream tooling.
Use cases span CI/CD risk reviews, license risk assessments, supplier audits, and posture reporting for audits and governance programs.