EVERYTHING XIAOMI
Get listed

SBOM Workbench

SBOM Workbench is a graphical tool for scanning and auditing source code with the SCANOSS API.

Place
#14 of 28
Score
6.1
SBOM Workbench's website

What SBOM Workbench is

SBOM Workbench is a graphical tool for scanning and auditing source code with the SCANOSS API. It identifies open-source components, including undeclared code that may be absent from dependency manifests. The free Workbench can identify licenses and security vulnerabilities, and it generates SPDX-Lite software bills of materials. Release notes list exports in CycloneDX, SPDX Lite, CSV, and HTML. It is aimed at developers and runs on Linux, macOS, and Windows. Its CLI can be configured for multiple SCANOSS API endpoints, including custom servers. Listed integrations include pre-commit hooks, Actions, pipelines, and webhooks; Bitbucket is marked as coming soon. Repository documentation describes a collaborative workspace, and the Workbench has a public GitHub repository. Cryptographic algorithm identification is available only in the premium version. SCANOSS offers support by email. The Workbench itself is free to download; prices listed for broader SCANOSS subscriptions are not prices for this tool.

Good

  • Finds components missing from dependency manifests.
  • Free version identifies licenses and security vulnerabilities.
  • Exports include CycloneDX, SPDX Lite, CSV, and HTML.
  • Runs on Linux, macOS, and Windows.

Watch out

  • Cryptographic algorithm identification requires the premium version.
  • Bitbucket integration is marked as coming soon.

Who it suits

SBOM Workbench suits developers who need to inspect source code for open-source components, licenses, and vulnerabilities. It also fits teams that want to configure SCANOSS API endpoints or use a collaborative workspace.

Verdict

SBOM Workbench provides source scanning and several SBOM export formats at no download cost. Cryptographic algorithm identification is a premium feature, and Bitbucket integration is not yet listed as available.

Plans and prices

From SBOM Workbench's own pricing page, checked 7 Oct 2026.

All about pricing
PlanPriceWhat it gives you
SBOM WorkbenchFreeFree download · advanced cryptographic detection is a premium feature

The facts

Each one read from SBOM Workbench's own pages, with the date it was checked.

What it does

API configuration
The Workbench CLI can configure multiple SCANOSS API endpoints, including custom servers.checked 7 Oct 2026
Collaboration
The Workbench repository documents support for a collaborative workspace.checked 7 Oct 2026
Imports
Workbench v1.19.0 added JSON raw-results import and project import with source-code inclusion.checked 7 Oct 2026
Integrations
The maker lists pre-commit hooks, Actions, pipelines and webhooks among its integrations; Bitbucket is marked coming soon.checked 7 Oct 2026
Intended users
The maker describes the Workbench as a developer-oriented graphical tool for scanning and auditing source code.checked 7 Oct 2026
Open source
SCANOSS says its distributed software is open source, and the Workbench has a public GitHub repository.checked 7 Oct 2026
Premium feature
The maker says cryptographic algorithm identification is available in the premium version.checked 7 Oct 2026
Pricing context
The maker’s pricing page lists paid SCANOSS subscriptions from € 35K / yr for small dev teams and € 53K / yr for medium dev teams, with enterprise pricing custom; these are not stated as Workbench prices.checked 7 Oct 2026
Purpose
SBOM Workbench is a graphical interface for scanning and auditing source code using the SCANOSS API.checked 7 Oct 2026
SBOM output
The Workbench generates SPDX-Lite SBOMs, and its release notes list exports including CycloneDX, SPDX Lite, CSV and HTML.checked 7 Oct 2026
Security findings
The free Workbench identifies open-source licenses and security vulnerabilities in code.checked 7 Oct 2026
Source scanning
It identifies open-source components, including undeclared code that may not appear in dependency manifests.checked 7 Oct 2026
Support
SCANOSS directs users to contact its support team by email at [email protected].checked 7 Oct 2026

The company

Headquarters
Madrid, Spainchecked 28 Sep 2026

Alternatives to SBOM Workbench

All alternatives
  1. 1

    DeepFilterNet

    Free planOpen sourceAPILinuxmacOSSelf-hosted
    7.6Free plan
    Visit
  2. 2FOSSology logo

    FOSSology

    Free planOpen sourceWebAPILinuxmacOS
    7.5Free plan
    Visit
  3. 3

    ScanCode.io

    Free planWebAPILinuxmacOS
    7.0Free plan
    Visit
  4. 4

    SourceTrust

    Free planWeb
    6.7From $299 a year
    Visit
  5. 5

    FOSSA

    Free planWebAPILinuxSelf-hosted
    6.4Free plan
    Visit
  6. 6

    DejaCode

    WebAPILinuxSelf-hosted
    6.3From $500 a month
    Visit