Create an account

boring.tools is currently in beta. To get access, sign up for the waitlist on the homepage.

Once you’ve been granted access, head to my.boring.tools and create your account. Sign-in works via magic link — enter your email address and click the link in the email you receive. No password required.

Set up your organization

After signing in for the first time, you’ll be prompted to create an organization. Organizations are the top-level container for all your projects, SBOMs, team members, and API keys. You cannot use boring.tools without an organization.

Give your organization a name and confirm. You’ll be taken to the main dashboard immediately.

Invite team members

1. Go to Settings → Members
2. Click Invite member
3. Enter the email address — they’ll receive an invitation email with a magic link
4. Once they accept, they appear in the members list

Get your API key

If you plan to call the API directly from CI/CD pipelines, you need an API key.

1. Go to Settings → API Keys
2. Enter a descriptive name for the key (e.g. ci-pipeline or local-dev)
3. Click Create
4. Copy the key immediately — it is shown only once and cannot be retrieved later

The key table shows all your existing keys with their name, key prefix (first few characters), creation date, expiry date, and status (Active/Disabled). You can revoke any key at any time by clicking Revoke — this cannot be undone.

Quick start: your first SBOM in 5 minutes

The fastest way to get value from boring.tools:

1. Create a project — go to Projects → New project, give it a name
2. Upload an SBOM — in your project, click Upload SBOM and select a CycloneDX or SPDX file
3. View results — the SBOM is scanned automatically and vulnerabilities appear within seconds

See SBOM Generation for full details.

Navigation overview