One price per organization. Unlimited users.
Pay for the products you ship, not for the people who look after them.
Every new organization starts with a 14-day Business trial, no card needed.
Free
See what you ship and what affects it.
€0 / monthplus VAT
- 1 product
- SBOM upload from CI or the app
- Daily matching against OSV, KEV, EUVD and EPSS
- Triage with VEX, OpenVEX export
- Email alert when a vulnerability in your product is actively exploited
Starter
Most teamsFor one person who handles CRA vulnerability work.
€149 / monthplus VAT
- 5 products
- Everything in Free
- CRA reporting workflow: deadlines, submission log, report drafts
- Weekly digest
- AI triage suggestions included
Business
For a portfolio of products.
€449 / monthplus VAT
- 25 products
- Everything in Starter
- Four times the AI allowance
Enterprise
More products or your own terms.
Customplus VAT
- More than 25 products
- Contract and invoice terms
- Self-hosting and SSO are planned
Questions about plans
What counts as a product?
A project in boring.tools: one product you put on the market, with all its versions and artifacts.
What happens after the trial?
Without a plan the organization moves to Free. Nothing is deleted: products beyond the limit stay visible and are still checked for exploited vulnerabilities, but take no new SBOMs until you upgrade.
Am I alerted on Free?
Yes. If a vulnerability in your product is actively exploited, boring.tools opens the reporting case with its deadlines and emails you on every plan. Working the case (submission log, fix date, report drafts) is part of Starter.
Who bills me?
Polar, our merchant of record. They handle payment, invoices and VAT. Prices are per month and exclude VAT.
Can I cancel?
Any time, in the customer portal under Settings → Plan. The plan runs until the end of the paid month.