Side by side
SBOM Workbench vs SourceTrust
Both stand on open source license compliance software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
SBOM Workbench covers component discovery, license and vulnerability identification, and several SBOM export formats in a free graphical tool. Cryptographic algorithm identification is reserved for the premium version, while paid subscription prices listed for broader SCANOSS offerings are not Workbench prices.
Visit SBOM WorkbenchSourceTrust combines dependency inventory, license review, and shareable compliance outputs, with review required before publication. Teams should check eligibility and billing triggers, and treat it as software tooling rather than legal advice.
Visit SourceTrustThe facts
| SBOM Workbench | SourceTrust | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Windows | Web |
| Lowest paid plan | Free or on request | Per project — yearly: $299 a year |
| Plans published | 1 | 6 |
| Maker | Not published | Not published |
| Website | scanoss.readthedocs.io | sourcetrust.dev |
| On open source license compliance software | #20 of 28 | #24 of 28 |
SBOM Workbench: what it does well
- Free to download on Linux, macOS, and Windows.
- Finds components missing from dependency manifests.
- Identifies licenses and security vulnerabilities.
- Exports include CycloneDX, SPDX Lite, CSV, and HTML.
- CLI supports multiple API endpoints, including custom servers.
What to know first
- Cryptographic algorithm identification requires the premium version.
- Bitbucket integration is marked as coming soon.
SourceTrust: what it does well
- Combines dependencies from repositories, lockfiles, and SBOMs
- Flags packages that need a decision
- Offers multiple compliance and inventory export formats
- Checks for changes from published inventory
- Lockfiles are parsed in the browser before upload
What to know first
- Standard billing starts on first publish or export download
- Free publishing is limited to eligible public GitHub projects
- No free trial is offered
- The product is not legal advice
Alternatives to SBOM Workbench Alternatives to SourceTrust The whole list