Full glossary
Glossary · CycloneDX
CycloneDX: the security-oriented SBOM format
OWASP's standard for describing the components of a piece of software.
Updated · 3-minute read
In one sentence
CycloneDX is an SBOM format published by OWASP, designed first and foremost for security and vulnerability management.
What it contains
Every component with its name, its version and its purl identifier, plus license and dependency information.
Where it's used
It can be imported into vulnerability management tools such as OWASP Dependency-Track.
And LibWatch?
LibWatch exports your projects to CycloneDX 1.5, in JSON, validated against the official schema. It isn't the latest version of the standard, but common tools read it.