CycloneDX is SBOM SaaSBOM VEX OBOM HBOM VDR

Software Bill of Materials

Software-as-a-Service Bill of Materials

Vulnerability Exploitability Exchange

Operations Bill of Materials

Hardware Bill of Materials

Vulnerability Disclosure Report

12 May 2022 - OWASP CycloneDX Launches SBOM Exchange API, Standardizing SBOM Distribution

Capabilities

CycloneDX is a modern standard for the software supply chain. Discover the many capabilities that await.

Use Cases + Examples

Explore a wide array of use cases along with corresponding examples in both XML and JSON formats.

Tool Center

Discover open source and proprietary tools and solutions that support the CycloneDX standard.

Introduction

OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed for use in application security contexts and supply chain component analysis.

Strategic direction and maintenance of the specification is managed by the CycloneDX Core working group, with origins in the OWASP community.

Capabilities

Use Cases + Examples

Tool Center

Introduction

CycloneDX Supporters