SBOMApp vs sbomify
SBOMApp
sbomapp.comsbomify
sbomify.comSide by side
| Figure | SBOMApp | sbomify |
|---|---|---|
| Price from | — | $159/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · SBOM Management Software | 7.2 (#17) | 8.1 (#7) |
| Purpose | SBOM App helps enterprises generate, analyze, govern, remediate, and securely share software bills of materials across the software development lifecycle. | sbomify is a security artifact hub for generating, managing, analyzing, and sharing SBOMs and compliance documents. |
| SBOM formats | It supports SBOM generation in SPDX 3.0 and CycloneDX 1.7 formats. | The platform supports CycloneDX and SPDX formats. |
Plans
In their own words
sbomify
sbomify is a security artifact hub for generating, managing, analyzing and sharing software bills of materials (SBOMs) and compliance documents. It supports CycloneDX and SPDX, with generation workflows for 17 ecosystems, container images, directory scans and Yocto/OpenEmbedded builds. For CI/CD, its Action supports GitHub, while documented Docker workflows cover GitLab, Bitbucket and other systems. Vulnerability analysis integrations include Google OSV and OWASP Dependency-Track. Trust Centers let teams share security materials through a custom domain, with public or private access. Supported materials include SBOMs, VEX and CBOM artifacts, security certifications, penetration test reports and compliance attestations. Trust Center content is also available programmatically through the Transparency Exchange API. The open-source platform can be self-hosted or used as a hosted service. The free Community plan limits accounts to one product, five components, public documents and one user. Business costs $159/mo (annual); Enterprise pricing is by custom quote.