SBOM Workbench
Desktop software for scanning source code and generating SBOMs.
At a glance
- Editor scoreNot yet scored
- PricingFree plan
- Best forFree desktop source and SBOM analysis
- Free planYes
- Paid fromNone
- Facts checked20 Sep 2026
Where it wins
- Free and open source across Windows, macOS, and Linux
- Detects files, packages, snippets, dependencies, licenses, and vulnerabilities
- Exports SBOMs in SPDX Lite, CycloneDX, CSV, and HTML formats
Where it doesn't
- Integration coverage centers on the SCANOSS API
- Some component identification may require manual review
- Desktop-focused rather than a broad platform integration suite
Our verdict on SBOM Workbench
SBOM Workbench is a free, open-source desktop application from SCANOSS for developers, auditors, and software supply-chain teams. It scans source code against a knowledge base and identifies files, packages, snippets, dependencies, licenses, license obligations, vulnerabilities, and local cryptographic algorithms and libraries. The application runs on Windows, macOS, and Linux, making it suited to teams that want local source and software-bill-of-materials analysis across major desktop platforms.
The published product details show a single free offering rather than a tiered plan structure. Its analysis workflow supports project imports from source code or WFP fingerprint files, with automatic or manual component identification. Users can review detected and identified components, then export SBOMs in SPDX Lite, CycloneDX, CSV, or HTML formats. That combination gives teams a practical path from source inspection to license-obligation review and shareable inventory outputs without a paid product tier.
SBOM Workbench is most focused on desktop analysis and the SCANOSS ecosystem. Its documented integration is the SCANOSS API, while its core coverage spans source, package, snippet, dependency, license, obligation, vulnerability, and cryptographic findings. Teams seeking a free, open-source tool for focused composition and compliance work should consider it. Organizations that require a wider set of verified third-party integrations or a broader platform experience should choose a different type of product.
SBOM Workbench pricing
SBOM Workbench fact sheet
| Free plan | Yes |
|---|---|
| Paid from | None |
| Policy enforcement | Not verified |
| Obligation tracking | Yes |
| Attribution reports | Not verified |
| SBOM import formats | Not verified |
| Deployment options | Not verified |
| Source scan methods | Multiple |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Support | Email, Tickets, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 1 integrations: SCANOSS API |
| Pricing | Free plan (source) |
| Website | scanoss.readthedocs.io |
| Facts checked | 20 Sep 2026 |
SBOM Workbench integrations
SBOM Workbench lists 1 integrations on its own site.
- SCANOSS API
Alternatives to SBOM Workbench
- FOSSABroad open-source compliance coverage with free access, CI/CD controls, and SBOM workflows.5.0
- OSS Review ToolkitA flexible, self-hosted toolkit with broad ecosystem coverage and policy automation.—
- FossID WorkbenchA deep governance platform for teams managing open-source risk across the software lifecycle.—
See all SBOM Workbench alternatives →
Used SBOM Workbench? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SBOM Workbench for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
SBOM Workbench is listed in our Open Source License Compliance Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/sbom-workbench/"><img src="https://www.itechguides.com/best/badge/sbom-workbench.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.