diff --git a/README.md b/README.md
index 5467d34..b2aea25 100644
--- a/README.md
+++ b/README.md
@@ -198,6 +198,7 @@ This list of tools provide the capabilities necessary for finding security anoma
 ## Testing
 Testing is an essential element of a DevSecOps program because it helps to prepare teams for Rugged operations and to determine security defects before they can be exploited.
 
+* [Bomly](https://github.com/bomly-dev/bomly-cli)
 * [Brakeman](http://brakemanscanner.org)
 * [Checkov](https://github.com/bridgecrewio/checkov/)
 * [Chef Inspec](https://github.com/chef/inspec)