CBOM.net

Community resource · local-first

Know where your cryptography lives.

Learn what a CBOM is, build one with guided steps, and inspect a CycloneDX CBOM without uploading your file.

Build a CBOM Open validator
cbom.json
{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "assetType": "algorithm",
  "primitive": "asymmetric"
}
PARSED LOCALLY · 0 ERRORS · 1 ADVISORY

Choose a path

What are you here to do?

01

Build a CBOM

Create a CycloneDX 1.7 inventory with guided steps.

02

Check a CBOM

Validate structure and get plain-language findings.

03

Browse resources

Find curated templates, tools, standards, and guidance.

04

Understand CBOM

Learn the essential ideas in five minutes.

05

Ask a supplier

Request useful, updateable cryptographic inventories.

Relationship map

A CBOM in one picture

APP

Customer API

application

LIB

Crypto library

provides

TLS

TLS 1.3

protocol

ALG

AES-GCM

algorithm