PRIVACY-FIRST WEB SBOM SCANNER

Audit Software Dependencies & Discover Vulnerabilities

Drag and drop your manifest or lockfile. File parsing runs locally in your browser; only package coordinates are matched against the OSV database.

Local Device ParsingNo Registration Required

Drag & Drop Dependency Files Here

Or select files from your computer. Up to 5 files, 5MB per file.

Select Files

Supported formats: package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, Pipfile.lock, poetry.lock, pom.xml, Cargo.lock, go.mod, composer.lock