SBOM Workbench
scanoss.readthedocs.io
What it is
SBOM Workbench is a graphical tool for scanning and auditing source code through the SCANOSS API. It identifies open-source components, including undeclared code that may not appear in dependency manifests, and the free version identifies licenses and security vulnerabilities. It generates SPDX-Lite software bills of materials; release notes also list CycloneDX, SPDX Lite, CSV, and HTML exports. The tool is aimed at developers and runs on Linux, macOS, and Windows. Its CLI can use multiple SCANOSS API endpoints, including custom servers. Listed integrations include pre-commit hooks, Actions, pipelines, and webhooks, while Bitbucket is marked as coming soon. Repository documentation describes a collaborative workspace. The distributed software is described by SCANOSS as open source, and the Workbench has a public GitHub repository. Cryptographic algorithm identification is a premium feature, not included in the free Workbench. It is free to download, and SCANOSS directs support requests to email. Paid SCANOSS subscription prices listed for other offerings are not Workbench prices.
Spec sheet
- Purpose
- SBOM Workbench is a graphical interface for scanning and auditing source code using the SCANOSS API.Read 7 Oct 2026 · github.com
- Intended users
- The maker describes the Workbench as a developer-oriented graphical tool for scanning and auditing source code.Read 7 Oct 2026 · github.com
- Integrations
- The maker lists pre-commit hooks, Actions, pipelines and webhooks among its integrations; Bitbucket is marked coming soon.Read 7 Oct 2026 · scanoss.com
- Support
- SCANOSS directs users to contact its support team by email at [email protected].Read 7 Oct 2026 · scanoss.com
- Headquarters
- Madrid, SpainRead 28 Sep 2026 · scanoss.readthedocs.io
- API configuration
- The Workbench CLI can configure multiple SCANOSS API endpoints, including custom servers.Read 7 Oct 2026 · github.com
- Collaboration
- The Workbench repository documents support for a collaborative workspace.Read 7 Oct 2026 · github.com
- Imports
- Workbench v1.19.0 added JSON raw-results import and project import with source-code inclusion.Read 7 Oct 2026 · scanoss.com
- Open source
- SCANOSS says its distributed software is open source, and the Workbench has a public GitHub repository.Read 7 Oct 2026 · scanoss.com
- Premium feature
- The maker says cryptographic algorithm identification is available in the premium version.Read 7 Oct 2026 · scanoss.com
- Pricing context
- The maker’s pricing page lists paid SCANOSS subscriptions from € 35K / yr for small dev teams and € 53K / yr for medium dev teams, with enterprise pricing custom; these are not stated as Workbench prices.Read 7 Oct 2026 · scanoss.com
- SBOM output
- The Workbench generates SPDX-Lite SBOMs, and its release notes list exports including CycloneDX, SPDX Lite, CSV and HTML.Read 7 Oct 2026 · scanoss.com
- Security findings
- The free Workbench identifies open-source licenses and security vulnerabilities in code.Read 7 Oct 2026 · scanoss.com
- Source scanning
- It identifies open-source components, including undeclared code that may not appear in dependency manifests.Read 7 Oct 2026 · docs.scanoss.com
Plans and prices
SBOM Workbench Free Free download · advanced cryptographic detection is a premium feature Read 7 Oct 2026 · scanoss.com
Strong points and limits
Strong points
- Identifies components missing from dependency manifests
- Free version identifies licenses and vulnerabilities
- Exports SBOMs in several listed formats
- CLI can use custom SCANOSS API endpoints
- Runs on Linux, macOS, and Windows
Limits
- Cryptographic algorithm identification is premium-only
- Bitbucket integration is marked as coming soon
Who it suits
Developers who need a graphical way to scan source code for open-source components, licenses, and vulnerabilities. It may suit teams working with SBOM exports and SCANOSS API endpoints.
Verdict
SBOM Workbench offers source scanning and several SBOM export formats at no charge. Note that cryptographic algorithm identification requires premium, and listed prices for broader SCANOSS subscriptions are not Workbench prices.
Where Specifiction places it
- Open Source License Compliance Software#22 of 287.5
Alternatives to SBOM WorkbenchAll alternatives →
FOSSology Free plan 8.8 Visit 
FossID Workbench 8.2 Visit 
Double Open Compliance Free plan 8.1 Visit