SBOM Format Converter

Convert SBOM files between CycloneDX, SPDX, and SWID Tags. Use it for common workflows such as SPDX to CycloneDX conversion, output review, and follow-up validation.

From Format

CycloneDX JSON and XML serializations

SPDX JSON, XML, RDF, Tag-Value, YAML, and JSON-LD

SWID Tags Software Identification Tags

To Format

CycloneDX Canonical CycloneDX JSON output

SPDX Canonical SPDX JSON output

SWID Tags Software Identification Tags

Input SBOM

Converted SBOM

Conversion Features

🔄

Bidirectional Conversion

Convert between any supported formats in both directions with intelligent field mapping.

🛡️

Data Preservation

Maintains as much metadata as possible during conversion, with warnings for unsupported fields.

✅

Format Validation

Validates both input and output formats to ensure specification compliance.

⚡

Fast Processing

Fast server-side conversion with immediate output review, download, and follow-up validation.

Format Support Matrix

From \ To	CycloneDX	SPDX	SWID Tags
CycloneDX	✅ Native	✅ Full Support	⚠️ Limited
SPDX	✅ Full Support	✅ Native	⚠️ Limited
SWID Tags	⚠️ Limited	⚠️ Limited	✅ Native

✅ Full conversion with all metadata preserved

⚠️ Partial conversion - some data may be lost

Conversion Guide

Before Converting

Ensure your input SBOM is valid and well-formed
Understand the differences between target formats
Check which metadata will be preserved in conversion
Consider format-specific requirements

Best Practices

Validate converted output before use
Review conversion warnings and notes
Test with target systems before deployment
Keep original files as backup

Common Issues

Missing fields: Not all fields map between formats
Format variations: Some formats have multiple sub-formats
Namespace conflicts: Different namespace requirements
Validation errors: Output may need manual adjustment