Syft
by AnchoreVerified
Evaluating Syft? See how this SBOM tool handles license detection, format conversion and cosign attestations, where it fits best and which alternatives to compare.
- Product Type
- Open Source SBOM Generator
- Deployment
- Cloud
- Industries
- 3+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Syft
Syft is a free, open source command-line tool and Go library from Anchore that generates software bills of materials (SBOMs) from container images and file systems. It has become one of the most popular SBOM generators in the open source community.
Categories & Subcategories
Categories
Subcategories
Key Features
7 capabilities that Syft offers.
OS and language package detection
License detection
CycloneDX, SPDX and JSON output
Format conversion
Cosign attestations
Grype integration
Use Cases
SBOM generation
Container inventory
Supply chain transparency
Vulnerability scanning input
Industries Served
Syft is used across 3+ industries.
Technology
Cross-industry
Open Source Community
Regions
Global
Integrations
Works with the tools teams already use
Grype
Docker
Podman
Sigstore Cosign
GitHub Actions
GitLab CI
Anchore Enterprise
Deployment Options
Flexible deployment to meet your needs
Cloud
Platform & Access
What Syft supports, at a glance.
- API accessNo
- Single sign-on (SSO)No
- Role-based access (RBAC)No
- Multi-tenantNo
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Supports EO 14028 and NTIA minimum SBOM elements
- Supported platforms
- LinuxmacOSWindowsDocker
- Operating systems
- LinuxmacOSWindows
- Browser support
- Not applicable (CLI tool)
- Languages supported
- English
- Data residency
- Local (runs on user machine)
- Deployment details
- Command-line tool (local); CI/CD; Command-line tool; Go library
Syft Reviews
No reviews yet
Be the first to share your experience with Syft.
More Products from Anchore
View all →Grype
Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.
Anchore SBOM
Get the facts on Anchore SBOM: SBOM generation via Syft and third-party SBOM import. Built for SBOM compliance. Compare it with other SBOM options before you decide.
Anchore Enterprise
Anchore Enterprise from Anchore focuses on SBOM management. Key capabilities: policy engine. Compare it with the leading Software Supply Chain Security alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
JFrog Xray
byJFrog
JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
Snyk SBOM
bySnyk
Snyk SBOM is a software bill of materials generation & audit used for Component Governance. Highlights include CycloneDX & SPDX export. Compare it with other SBOM tools.
DevSecOps & Software Supply ChainView details
Mend SBOM
byMend
Free trial available. Mend SBOM by Mend offers CycloneDX & SPDX export and component vulnerability tracking. Compare features, use cases and leading SBOM alternatives.
DevSecOps & Software Supply ChainView details
Veracode Software Composition Analysis
byVeracode
Get the facts on Veracode Software Composition Analysis: SBOM export. Built for Dependency Security. Compare it with other SBOM options before you decide.
DevSecOps & Software Supply ChainView details