CBOM.net

Browser-local CBOM Playground

Validate. Understand. Improve.

Paste CycloneDX JSON or choose a file. Your CBOM stays on this device and is never sent to CBOM.net.

Local onlyPlan migration
JSON · CycloneDX 1.6–1.7

Analysis result

Core checks complete

Parsed locally
Version
1.7
Assets
3
Links
3

Core structure looks usable

The document parsed successfully and identifies its CycloneDX CBOM structure.

1 asset needs post-quantum migration

RSA-2048 uses classical cryptography that a cryptographically relevant quantum computer would break. Plan migration to ML-KEM and ML-DSA.

Cryptographic assets

1 suggestions
AssetTypePQC readinessGuidance
TLS 1.3protocolTrack configurationProtocol readiness depends on the negotiated algorithms inside it.
AES-256-GCMalgorithmQuantum-resistantAES-256 is considered sufficient against Grover-style attacks.
RSA-2048algorithmMigration neededClassical public-key cryptography; plan migration to ML-KEM / ML-DSA.

Readiness labels are explanatory heuristics from asset names — not certification. Verify against current NIST guidance.