Free scan

Free SBOM and lockfile scan

Upload a lockfile or SBOM and see a summary of known vulnerabilities, no signup. We match components against OSV.dev and the CISA KEV catalogue. We don't keep the file.

  • No signup
  • File not stored
  • Takes a few seconds

requirements.txt, poetry.lock, Pipfile.lock, package-lock.json, yarn.lock (v1), go.sum, Cargo.lock, CycloneDX JSON or SPDX JSON. Up to 5 MB.

Matches depend on how well your dependencies are identified; no scan catches everything. Not legal advice.