PQC ToolboxCycloneDX CBOM viewer
Inspect cryptography, software and hardware records and follow their dependencies.
Open a bill of materials
Choose a CycloneDX 1.6 or 1.7 JSON file up to 8 MiB. Your file is read in this tab and stays on your device.
01 / Document
Document notes
02 / Component explorer
How to read a BOM
Select a component to inspect its recorded fields. For a CBOM, look at the cryptographic function first. A key-exchange algorithm, a certificate signature and a symmetric cipher can all describe different parts of one connection. For software and hardware, look for version, supplier, identifiers and licenses where provided.
Use Depends on and Used by to follow explicit dependency entries. Vista asset context groups records sharing an asset identifier. Coverage, assessment and certification require evidence beyond the presence of a component.