This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

SBOM Workbench

Free#11 of 28 in Open Source License Compliance Software

SBOM Workbench: A free, open-source desktop tool for source, license, vulnerability, and SBOM analysis. Ranked #11 of 28 in Open Source License Compliance Software by our editors (8.0/10); pricing: Free plan; best for free desktop source and SBOM analysis.

8.0/10Editor score

Visit SCANOSS

SBOM Workbench8.0 Visit SCANOSS

At a glance

Editor score
8.0 / 10
Pricing
Free plan
Best for
Free desktop source and SBOM analysis
Free plan
Yes
Paid from
Free
Facts checked
20 Sep 2026

Where it wins
- Free and open source across Windows, macOS, and Linux
- Detects files, packages, snippets, dependencies, licenses, and vulnerabilities
- Exports SBOMs in SPDX Lite, CycloneDX, CSV, and HTML formats
Where it doesn't
- Integration coverage centers on the SCANOSS API
- Some component identification may require manual review
- Desktop-focused rather than a broad platform integration suite

Our verdict on SBOM Workbench

SBOM Workbench is a free, open-source desktop application from SCANOSS for developers, auditors, and software supply-chain teams. It scans source code against a knowledge base and identifies files, packages, snippets, dependencies, licenses, license obligations, vulnerabilities, and local cryptographic algorithms and libraries. The application runs on Windows, macOS, and Linux, making it suited to teams that want local source and software-bill-of-materials analysis across major desktop platforms.

The published product details show a single free offering rather than a tiered plan structure. Its analysis workflow supports project imports from source code or WFP fingerprint files, with automatic or manual component identification. Users can review detected and identified components, then export SBOMs in SPDX Lite, CycloneDX, CSV, or HTML formats. That combination gives teams a practical path from source inspection to license-obligation review and shareable inventory outputs without a paid product tier.

SBOM Workbench is most focused on desktop analysis and the SCANOSS ecosystem. Its documented integration is the SCANOSS API, while its core coverage spans source, package, snippet, dependency, license, obligation, vulnerability, and cryptographic findings. Teams seeking a free, open-source tool for focused composition and compliance work should consider it. Organizations that require a wider set of verified third-party integrations or a broader platform experience should choose a different type of product.

Your product? Our editors can test SBOM Workbench in depth and publish a review, labelled as paid · from $149/mo →

SBOM Workbench pricing

Plans Free planFree Free to use — no paid tier required for the core job.

See plans on scanoss.readthedocs.io

SBOM Workbench fact sheet

Free plan	Yes
Paid from	Free
Policy enforcement	Not verified
Obligation tracking	Yes
Attribution reports	Not verified
SBOM import formats	Not verified
Deployment options	Not verified
Source scan methods	Multiple
Deployment	Desktop
Platforms	Windows, macOS, Linux
Support	Email, Tickets, Docs
Built for	Solo, Small business, Mid-market, Enterprise (editorial estimate)
Integrations	1 integrations: SCANOSS API
Pricing	Free plan (source)
Website	scanoss.readthedocs.io
Facts checked	20 Sep 2026

SBOM Workbench integrations

SBOM Workbench lists 1 integrations on its own site.

SCANOSS API

Alternatives to SBOM Workbench

See all SBOM Workbench alternatives →

Used SBOM Workbench? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SBOM Workbench for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used SBOM Workbench myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

SBOM Workbench is listed in our Open Source License Compliance Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/sbom-workbench/"><img src="https://www.itechguides.com/best/badge/sbom-workbench.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update