Private matching workspaceOriginal files stay in the browserUncertain matches remain visible

Private SBOM and VEX matching

Check which catalogue records apply to your inventory

Select supported software inventory files, review how each component was matched, and keep ambiguous or unmatched components visible for manual checking.

SBOM and VEX matching

Check which catalogue records apply to your inventory

Privacy model: files are parsed in this browser. BlackTree receives only normalized component identifiers and optional VEX statements for this request. Files, identifiers and results are not written to the database or retained by default.

Choose SBOM and optional VEX JSON filesCycloneDX 1.4–1.6 · SPDX 2.2–2.3 · optional CycloneDX VEX, CSAF 2.x or OpenVEX · 5 MB per file