diff --git a/docs/reference-manual/native-image/BuildOutput.md b/docs/reference-manual/native-image/BuildOutput.md
index 0cfabc2840c2..9d5cc274e462 100644
--- a/docs/reference-manual/native-image/BuildOutput.md
+++ b/docs/reference-manual/native-image/BuildOutput.md
@@ -264,9 +264,10 @@ If not included, the attack surface of the executable is reduced as the executab
#### Software Bill of Material (SBOM)
This section indicates whether a SBOM was assembled and in what ways it was stored.
The storage formats include: `embed`, which embeds the SBOM in the binary; `classpath`, which saves the SBOM to the classpath; and `export`, which includes the SBOM as a JSON build artifact.
-Use `--enable-sbom` to activate this feature which defaults to the `embed` option.
+The SBOM feature is enabled by default and defaults to the `embed` option.
When embedded, the SBOM size is displayed.
-The number of components is always displayed.
+The number of components is always displayed.
+The SBOM feature can be disabled with `--enable-sbom=false`.
For more information, see [Software Bill of Materials](../../security/native-image.md).
diff --git a/docs/security/SBOM.md b/docs/security/SBOM.md
index dd95aa77a66d..05e6716cf520 100644
--- a/docs/security/SBOM.md
+++ b/docs/security/SBOM.md
@@ -7,17 +7,20 @@ permalink: /security-guide/native-image/sbom/
# Software Bill of Materials (SBOM) in Native Image
-GraalVM Native Image can assemble a Software Bill of Materials (SBOM) at build time to detect any libraries that may be susceptible to known security vulnerabilities.
-Native Image provides the `--enable-sbom` option to embed an SBOM into a native executable (only available in Oracle GraalVM).
+GraalVM Native Image assembles a Software Bill of Materials (SBOM) at build time to detect any libraries that may be susceptible to known security vulnerabilities (only available in Oracle GraalVM).
+Pass the `--enable-sbom` option to the `native-image` command to configure the SBOM feature.
+The SBOM feature is enabled by default and defaults to the `embed` option which embeds an SBOM into the native executable.
In addition to being embedded, the SBOM can be added to the classpath or exported as a JSON file by using `--enable-sbom=classpath,export`.
The CycloneDX format is supported and is the default.
-To embed a CycloneDX SBOM into a native executable, pass the `--enable-sbom` option to the `native-image` command.
The implementation constructs the SBOM by recovering all version information observable in external library manifests for classes included in a native executable.
The SBOM is compressed to limit the SBOM's impact on the native executable size.
+The compressed size is typically less than 1/10,000 of the overall image size.
The SBOM is stored in the `gzip` format with the exported `sbom` symbol referencing its start address and the `sbom_length` symbol referencing its size.
+The SBOM feature can be disabled with `--enable-sbom=false`.
+
After embedding the compressed SBOM into the executable, the [Native Image Inspect Tool](../reference-manual/native-image/InspectTool.md) is able to extract the compressed SBOM using the `--sbom` parameter accessible through `$JAVA_HOME/bin/native-image-inspect --sbom ` from both executables and shared libraries.
It outputs the SBOM in the following format: