Your files stay on your device

SBOM validator

Check a CycloneDX SBOM in JSON or XML against the rules for its declared version.

Paste a CycloneDX document, drop a file, or load an example, then press Validate.

The checks are the structural rules the official CycloneDX schemas declare for the version the document names: required fields, type enums, the serial number pattern, unique bom-ref identifiers, and dependency refs that point at real elements. They do not cover every optional field, so a document can pass here and still carry semantic problems such as a wrong license ID.
OptionsValidate

More JSON tools

- JSON schema validator (/json/schema)
- JSON validator (/json/validator)
- JSON converter (/json/convert)
All JSON tools (/json)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/json/cyclonedx-validator
Markdown version: https://nutter.tools/json/cyclonedx-validator.md
Plain-text version: https://nutter.tools/json/cyclonedx-validator.txt
Agent index: https://nutter.tools/llms.txt