Free, no signup required

Generate a Software Bill of Materials

Paste a dependency manifest and instantly generate a CycloneDX or SPDX SBOM — the format EU Cyber Resilience Act and supply-chain compliance requests ask for.

Paste your manifest

Supports package.json, requirements.txt, composer.json, go.mod, Cargo.toml, Gemfile.lock, and more. Free plan generates SBOMs for up to 500 packages per manifest.

File Type

SBOM Format

Manifest contents

Press Cmd+Enter (Mac) or Ctrl+Enter (Windows/Linux) to generate

Want ongoing vulnerability monitoring, not just a one-off SBOM?

GeekWala scans your dependencies for known vulnerabilities with EPSS and CISA KEV prioritization — save projects, track history, and get alerted on new issues.

Get Started Free