boring.tools is priced per organization, with unlimited users. Prices are on the pricing page.
Plans
| Free | Starter | Business | |
|---|---|---|---|
| Products | 1 | 5 | 25 |
| SBOM upload, monitoring, triage, OpenVEX | ✓ | ✓ | ✓ |
| CRA reporting cases and alert email | ✓ | ✓ | ✓ |
| Reporting workflow: submission log, fix date, report drafts | – | ✓ | ✓ |
| Weekly digest | – | ✓ | ✓ |
| AI triage and AI report drafts | – | included | 4 × Starter |
A product is a project in boring.tools, with all its versions and artifacts. Need more than 25, or your own terms? Write to hello@boring.tools.
Trial
Every new organization gets 14 days of Business, without a card. Settings → Plan and the sidebar show how many days are left. Without a plan the organization then moves to Free.
Over a limit
Nothing is ever deleted when a plan ends or shrinks:
- You can’t create more products than the plan includes.
- Products beyond the limit — the most recently created ones — stay visible and are still checked for actively exploited vulnerabilities, but take no new SBOMs, neither from the app nor from CI (the upload answers
402). - On Free, a reporting case still opens and you still get the email; the deadlines apply either way. Ticking off submissions, the fix date and the report drafts need Starter.
- The AI allowance is per calendar month (UTC). When it is used up, new AI requests are refused until the next month.
Buying and cancelling
The organization’s owner chooses a plan under Settings → Plan. Payment runs through Polar, our merchant of record, who also issues the invoices and handles VAT. Prices are monthly and exclude VAT.
Change or cancel the plan with Manage subscription in the same place. A cancelled plan runs until the end of the paid month.