SBOM validator

Paste a CycloneDX document, drop a file, or load an example, then press Validate.

The checks are the structural rules the official CycloneDX schemas declare for the version the document names: required fields, type enums, the serial number pattern, unique bom-ref identifiers, and dependency refs that point at real elements. They do not cover every optional field, so a document can pass here and still carry semantic problems such as a wrong license ID.