Which vendors support CycloneDX?

Supported by 10 of 259 vendors

A bill of materials standard for software, services, AI models (ML-BOM) and hardware.

Vendor	Status	Source	Evidence
Anchore Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
AWS Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Black Duck Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Chainguard Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
JFrog Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Mend Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Snyk Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Sonatype Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Upwind Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Wiz Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026

About CycloneDX

A bill of materials standard for software, services, AI models (ML-BOM) and hardware.

Listed: in the CycloneDX Tool Center. Produces SBOMs: the vendor docs say its product exports or generates CycloneDX BOMs. Evidence: the vendor's own documentation naming it, with the sentence kept, or the specification project's own list.

Issued by OWASP and Ecma International (ECMA-424). Also searched as CycloneDX SBOM export, ML-BOM, SBOM formats.

Also in Provenance and supply chain: C2PA Content Credentials, SPDX

Standards changes by email