---
title: "Pico Quick Start"
description: "Install Pico and run your first workspace scan."
---
## Install

```bash
curl -fsSL https://boringinfra.company/pico/install.sh | sh
```

Pico installs to `~/.pico/bin`.

## Initialize

```bash
pico init
```

This creates `.pico/pico.db` in your current directory and applies schema migrations.

## Run a scan

```bash
pico scan
```

The foundation release records the scan lifecycle. Agent and provider discovery will populate the security graph in upcoming releases.

## View history

```bash
pico history --json
```

## Compare scans

```bash
pico diff --json
```

See the [JSON output documentation](https://github.com/BoringInfraCo/Pico/blob/main/docs/public/JSON-OUTPUT.md) for the v1 schema.

## What to expect

Pico is early. Today you can:

- Initialize a local security database
- Record scan lifecycles
- Export history and diffs as JSON

Coming soon:

- Agent and MCP server discovery
- Tool and permission mapping
- Attack path analysis with findings
- MCP integration for coding agents

## Next steps

- [Use Cases](/docs/products/pico/use-cases)
- [Pico on GitHub](https://github.com/BoringInfraCo/Pico)