The CycloneDX CLI tool currently supports BOM analysis, modification, diffing, merging, format
conversion, signing and verification.
Conversion is supported between CycloneDX XML, JSON, Protobuf, CSV, and SPDX JSON v2.3.
Publisher’s description
What is CycloneDX CLI?
CycloneDX CLI is an open-source program for Windows from CycloneDX Team. It is written in C#.
Installation and requirements
Official installers exist for 64-bit, ARM64 and 32-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 0.33.1, released on July 23, 2026. 3 versions are listed since February 10, 2026, each with links to its own installer files.
Popularity and file types
The source code on GitHub (CycloneDX/cyclonedx-cli) has 551 stars.
Project description on GitHub: “CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
In short: CycloneDX CLI is an open-source Windows tool for 64-bit, ARM64 and 32-bit PCs.
Is CycloneDX CLI safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
9B360974C41A5D612EB026FB5E3BB1FA28E08865F7A4F915665B8BC94BD3BC31· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 3 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 0.33.1Latest | July 23, 2026 | — | ARM64 Portable32-bit Portable64-bit Portable |
| 0.31.0 | April 29, 2026 | — | 32-bit PortableARM64 Portable64-bit Portable |
| 0.30.0 | February 10, 2026 | — | ARM64 Portable64-bit Portable32-bit Portable |
Install from the command line
Silent install ›winget install --id CycloneDX.CLI -eProgram files (.exe): cyclonedx.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- CycloneDX Team
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/CycloneDX/cyclonedx-cli
- Written in
- C#
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- Portable
- Version
- 0.33.1
- Released
- July 23, 2026
- Added to the catalogue
- March 31, 2026
- Versions listed
- 3
- GitHub stars
- 551
- GitHub forks
- 85
- Website
- github.com
- winget ID
- CycloneDX.CLI
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is CycloneDX CLI free?
Yes. CycloneDX CLI is open-source software under the Apache-2.0 licence.
Is CycloneDX CLI safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install CycloneDX CLI with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does CycloneDX CLI run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of CycloneDX CLI?
The versions page lists all 3 versions with links to their official installer files, back to February 10, 2026.
Can I use CycloneDX CLI without administrator rights?
Yes, it is portable: unpack and run it.