Your files stay on your device

# SBOM validator

Check a CycloneDX SBOM in JSON or XML against the rules for its declared version.

Paste a CycloneDX document, drop a file, or load an example, then press Validate.

The checks are the structural rules the official CycloneDX schemas declare for the version the document names: required fields, type enums, the serial number pattern, unique bom-ref identifiers, and dependency refs that point at real elements. They do not cover every optional field, so a document can pass here and still carry semantic problems such as a wrong license ID.
OptionsValidate

## More JSON tools

- [JSON schema validator](/json/schema)
- [JSON validator](/json/validator)
- [JSON converter](/json/convert)
[All JSON tools](/json)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/json/cyclonedx-validator
Markdown version: https://nutter.tools/json/cyclonedx-validator.md
Plain-text version: https://nutter.tools/json/cyclonedx-validator.txt
Agent index: https://nutter.tools/llms.txt