Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

Head-to-head · SBOM Generation Tools

cdxgen vs BomLens

  • Updated Nov 2026
  • Both researched from official sources
  • 7 checks side by side
Higher score cdxgen #6 in SBOM Generation Tools 7.9/10 Free plan Free plan✓ 6 of 6 features Visit cdxgen
BomLens #8 in SBOM Generation Tools 7.8/10 Free plan Free plan✓ 6 of 6 features Explore BomLens

cdxgen leads on 0 checks, BomLens on 0, and 7 are even. Who comes out ahead on the 7 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scorecdxgen · 7.9/10
  • Free planboth

cdxgen scores higher on our rubric for sbom generation tools: 7.9 against 7.8 out of 10; our editors rank them #6 and #8.

cdxgen is the better fit for multi-ecosystem source, container, and binary SBOMs. BomLens is the better fit for teams needing SBOMs across varied software inputs.

  • cdxgen fits best

    Multi-ecosystem source, container, and binary SBOMs

  • BomLens fits best

    Teams needing SBOMs across varied software inputs

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature cdxgen 7.9/10 Visit ↗ BomLens 7.8/10 Visit ↗
At a glance
Editor score 7.9 7.8
Ranking #6 in SBOM Generation Tools #8 in SBOM Generation Tools
Best for Multi-ecosystem source, container, and binary SBOMs Teams needing SBOMs across varied software inputs
Pricing model Free Free
Starting price Free plan Free plan
Free plan ✓ ✓
Free trial — —
Deployment Self-hosted, Cloud Self-hosted, Desktop
Platforms Linux, macOS, Windows Web, Windows, macOS, Linux
Support Community, Docs Community, Docs
Integrations 1 integrations 2 integrations
Built for Solo, Small business, Mid-market, Enterprise Solo, Small business, Mid-market, Enterprise
Features cdxgen 6/6 · BomLens 6/6
SPDX output ✓ ✓
CycloneDX output ✓ ✓
Source code input ✓ ✓
Container image input ✓ ✓
Binary input ✓ ✓
Build-pipeline support ✓ ✓
Our review
Pros
  • Generates CycloneDX BOMs from source, repositories, containers, and binaries
  • Exports SPDX 3.0.1 JSON-LD and supports CI/CD pipelines
  • Companion commands audit, validate, sign, and convert BOMs
  • Scans source, containers, binaries, firmware, and existing SBOMs
  • Generates CycloneDX 1.6 and can emit SPDX 2.3 copies
  • Offers browser, CLI, and desktop interfaces for local workflows
Cons
  • Command-line workflow may not suit teams seeking a graphical interface
  • Support channels are community and documentation
  • Its primary native output is CycloneDX, with SPDX available as an export
  • Runs locally with Docker rather than as hosted SaaS
  • Desktop installers are available for Windows and macOS only
  • Listed support channels are community and documentation
Our verdict

cdxgen is an open-source command-line tool for generating software bills of materials from source code, repositories, package URLs, container images, and binary artifacts. It is aimed at developers, build engineers, and AppSec or…

Read the review →

BomLens is an open-source supply-chain security tool from SK Telecom for creating software bills of materials and assessing supply-chain risk. It suits teams that need to scan different kinds of inputs, including source folders, GitHub…

Read the review →
  1. cdxgenSBOM Generation Tools 7.9Free plan
  2. BomLensSBOM Generation Tools 7.8Free plan

Strengths and trade-offs

  • cdxgen — where it wins

    • Generates CycloneDX BOMs from source, repositories, containers, and binaries
    • Exports SPDX 3.0.1 JSON-LD and supports CI/CD pipelines
    • Companion commands audit, validate, sign, and convert BOMs

    Where it doesn't

    • Command-line workflow may not suit teams seeking a graphical interface
    • Support channels are community and documentation
    • Its primary native output is CycloneDX, with SPDX available as an export

  • BomLens — where it wins

    • Scans source, containers, binaries, firmware, and existing SBOMs
    • Generates CycloneDX 1.6 and can emit SPDX 2.3 copies
    • Offers browser, CLI, and desktop interfaces for local workflows

    Where it doesn't

    • Runs locally with Docker rather than as hosted SaaS
    • Desktop installers are available for Windows and macOS only
    • Listed support channels are community and documentation

cdxgen vs BomLens: questions

Which is better for SBOM generation tools, cdxgen or BomLens?

cdxgen scores higher on our rubric for sbom generation tools: 7.9 against 7.8 out of 10; our editors rank them #6 and #8.

How do cdxgen and BomLens compare?

All 7 checks we put side by side come out level: neither leads on any.

Do cdxgen and BomLens have a free plan?

cdxgen: Yes. BomLens: Yes.

More comparisons

All SBOM generation tools comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

Last updated · How we research and update