thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

CycloneDX

An OWASP SBOM standard (ECMA-424) designed for security use cases, supporting software, hardware, services, cryptographic assets and VEX data.

Definition

CycloneDX represents components, dependencies, vulnerabilities and attestations in JSON, XML or Protocol Buffers. It also supports related bills of materials such as SaaSBOM, HBOM, CBOM and ML-BOM.

Example

A build tool generates a CycloneDX SBOM that a vulnerability management platform ingests.

Exam tip

CycloneDX comes from OWASP and is security-focused.

Related terms