| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 0 |
| Spec score · Software Composition Analysis Software | 8.2 (#11) | 7.3 (#49) |
| CI integration | Bomly supports SARIF output for code scanning and documents CI recipes for GitHub Actions, GitLab, Jenkins, Azure DevOps, and CircleCI. | The product page says ts-scan integrates with GitHub workflows through a GitHub Action. |
| Intended users | Bomly describes itself as built for developers and the AI agents they work with. | The maker describes ts-scan as an open-source CLI scanner for use in CI/CD pipelines to identify dependencies and create SBOMs. |
| Purpose | Bomly scans source trees, SBOMs, Git refs, and container images to build dependency graphs and explain why packages are present. | ts-scan scans software dependencies and generates a software bill of materials (SBOM). |
| SBOM formats | It reads SPDX and CycloneDX SBOMs and can generate SPDX and CycloneDX output. | It exports SBOMs in SPDX and CycloneDX formats. |
