Anonymous Tools
Developer

CycloneDX & SPDX Evidence Verifier

Validate SBOM component identity, resolved versions, package URLs, hashes, licenses and dependency-graph references.

Processed on your device
CycloneDX or SPDX JSON
This verifies identity, versions, hashes, licenses and dependency references. Known-vulnerability matching remains in the separate OSV tool.
Deterministic evidence-bound result
Verify SBOM evidence