Best sbom plugins for WordPress
The most popular sbom plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Vulnerability Monitor for the EU Cyber Resilience Act leads with 60+ active installs, ahead of Proofwright (fewer than 10) and Dragon Compliance (fewer than 10). All 3 plugins tagged “sbom” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 3 sbom plugins
- 1.
Vulnerability Monitor for the EU Cyber Resilience ActThe most installed sbom plugin, with 60+ active installs. No reviews yet, updated 4 months ago.
- 2.Proofwright
Fewer than 10 active installs. No reviews yet, updated 3 months ago.
- 3.
Dragon ComplianceFewer than 10 active installs. No reviews yet, updated 4 weeks ago.
All 3 plugins tagged “sbom”

Vulnerability Monitor for the EU Cyber Resilience Act
Up in the last 7 days:476#20,050by Mecanik Dev Ltd4 months ago
EU Cyber Resilience Act readiness for WordPress: build a CycloneDX SBOM, monitor vulnerabilities and export the documents auditors require.
- Installs
- 60+
- Rating
- –
- Downloads
- 0/day
Proofwright
Up in the last 7 days:13,142#56,181by 1click2open3 months ago
EU Cyber Resilience Act toolkit: component inventory, SPDX & CycloneDX SBOM, hash-chained snapshots, a posture score, and a CRA document generator.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Dragon Compliance
Down in the last 7 days:15,415#65,212by Dragon Core29 days ago
CRA and NIS2 compliance for WordPress: software inventory, SBOM export, vulnerability scanning, readiness checklist and a timestamped evidence log.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day