Terms of Service

VulnSea aggregates publicly available CVE and vulnerability information from sources such as NVD and GitHub Advisories and presents it for humans and automated agents. The content is informational only. Always verify against the official advisory before acting on it. We do not warrant that the data is complete, accurate, or current.

Some features require signing in via a third-party OAuth provider. You are responsible for activity under your account and for keeping your API keys secret. Notify us at [email protected] if you believe a key has been compromised; you can revoke keys yourself from your account page.

The latest 100 CVEs are available without an account. Older records and full-corpus enumeration require an account and a valid API key or signed-in session. You may use the API for lawful purposes, including automated/agentic workflows, subject to these Terms.

Rate limits apply and may be enforced at the edge and in the application. Do not attempt to circumvent rate limits, access controls, or the access-tier model (e.g. by rotating keys or IPs to scrape beyond your tier).

Pro is a paid subscription billed through Stripe. By subscribing you authorize recurring charges at the interval you select (e.g. monthly, quarterly, or yearly) until you cancel. Subscriptions renew automatically at the then-current price; applicable taxes may be added.

You can change your interval or cancel anytime from the billing portal linked on your account page. Cancellation takes effect at the end of the current billing period and your plan reverts to free; we do not provide prorated refunds for the remainder of a period except where required by law. Prices may change with notice for future billing periods.

PoC requests. Paid plans may let you request a proof-of-concept against a vulnerability, fulfilled on a best-effort basis. We do not guarantee that a PoC can or will be produced for any given item, and a request may be marked unavailable. PoC material is provided for lawful, authorized security testing only and is subject to the acceptable-use terms below.

During beta, billing may be limited or disabled and plan features may change.

You agree not to:

• Break the law or use the Service to harm others.
• Disrupt, overload, or attempt to gain unauthorized access to the Service or its infrastructure.
• Circumvent authentication, rate limits, or the access tiers.
• Resell or redistribute the data in a way that competes with the Service, or misrepresent it as official advisory data.
• Use the Service to develop or operate anything that facilitates unlawful exploitation of vulnerabilities.

We may suspend, rate-limit, ban, or delete accounts and revoke API keys that violate these Terms or threaten the Service, with or without notice.

Source vulnerability data originates with its respective publishers and remains subject to their terms. The VulnSea site, design, and software are ours or our licensors'. These Terms do not grant you rights to our trademarks.

The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. You use the data at your own risk.

To the maximum extent permitted by law, VulnSea and its operators will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss arising from your use of or reliance on the Service or its data.

You agree to indemnify and hold harmless VulnSea and its operators from claims arising out of your use of the Service or your violation of these Terms.

You may stop using the Service at any time and request account deletion (see the Privacy Policy). We may suspend or terminate access at our discretion, including for violations of these Terms.

These Terms are governed by the laws of the operator's principal place of business, without regard to conflict-of-laws rules. Disputes will be handled in the courts of that jurisdiction.

We may update these Terms as the Service evolves. Continued use after changes take effect constitutes acceptance. Material changes will be reflected by a new effective date above.

Questions: [email protected].