SBOM Workbench review
A free, open-source desktop tool for source, license, vulnerability, and SBOM analysis.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
SBOM Workbench is a free, open-source desktop application from SCANOSS for developers, auditors, and software supply-chain teams. It scans source code against a knowledge base and identifies files, packages, snippets, dependencies, licenses, license obligations, vulnerabilities, and local cryptographic algorithms and libraries. The application runs on Windows, macOS, and Linux, making it suited to teams that want local source and software-bill-of-materials analysis across major desktop platforms.
The published product details show a single free offering rather than a tiered plan structure. Its analysis workflow supports project imports from source code or WFP fingerprint files, with automatic or manual component identification. Users can review detected and identified components, then export SBOMs in SPDX Lite, CycloneDX, CSV, or HTML formats. That combination gives teams a practical path from source inspection to license-obligation review and shareable inventory outputs without a paid product tier.
SBOM Workbench is most focused on desktop analysis and the SCANOSS ecosystem. Its documented integration is the SCANOSS API, while its core coverage spans source, package, snippet, dependency, license, obligation, vulnerability, and cryptographic findings. Teams seeking a free, open-source tool for focused composition and compliance work should consider it. Organizations that require a wider set of verified third-party integrations or a broader platform experience should choose a different type of product.
SBOM Workbench pros and cons
- Where it wins
- Free and open source across Windows, macOS, and Linux
- Detects files, packages, snippets, dependencies, licenses, and vulnerabilities
- Exports SBOMs in SPDX Lite, CycloneDX, CSV, and HTML formats
- Where it doesn't
- Integration coverage centers on the SCANOSS API
- Some component identification may require manual review
- Desktop-focused rather than a broad platform integration suite
SBOM Workbench fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update