Terms of Service

If you accept these Terms on behalf of an organisation, you represent that you have the authority to bind that organisation, and "you" in these Terms includes both you individually and the organisation.

• "Account" means the unique account created for you to access the Service.
• "Confidential Information" means non-public information disclosed by one party to the other in connection with the Service, including pricing, technical details, and roadmaps.
• "Content" means CVE data, summaries, AI-generated guidance, scoring, and any other information made available through the Service.
• "Customer Data" means data you submit to the Service, including your declared technology stack, account preferences, and integration configurations.
• "Documentation" means the user-facing documentation we publish at /docs.
• "Free Tier" means the no-cost subscription level described on /pricing.
• "Paid Tier" means any subscription level with a recurring fee (currently Premium and Max).
• "Subscription Term" means the recurring period (monthly or yearly) for which a Paid Tier subscription is active.

3.1 Eligibility

The Service is intended for users 18 years of age or older operating in a professional capacity. By registering, you represent and warrant that you meet this requirement.

3.2 One person, one account

Unless explicitly authorised in writing, each Account is for a single user. You may not share credentials, transfer your Account, or allow others to access the Service through your Account.

• You may consume CVE alerts, dashboards, and API responses for your own monitoring, triage, and remediation workflows.
• You may share individual alerts and dashboards internally within your organisation.
• You may build internal tooling that consumes the Service through documented API endpoints, subject to applicable rate limits and the terms of your tier.

• Resell, sublicense, or otherwise commercially redistribute the Service or its Content.
• Reverse engineer, decompile, disassemble, or attempt to extract source code from any component of the Service, except to the extent applicable law expressly permits.
• Use the Service to build a competitive product or to train or fine-tune machine-learning models that compete with the Service.
• Bypass rate limits, authentication controls, tier gates, or other technical restrictions.
• Scrape, crawl, or harvest data from the Service through means other than the documented API.
• Use the Service to engage in any unlawful activity, distribute malware, or send unsolicited communications.
• Misrepresent your identity, impersonate another person, or attempt to gain unauthorised access to other Accounts.
• Remove, obscure, or alter any proprietary notice, trademark, or attribution displayed within the Service.

6.1 Fees and renewal

Current pricing is published at /pricing and may be changed prospectively on 30 days notice. Subscriptions renew automatically at the end of each Subscription Term at the then-current price for the tier unless cancelled before renewal.

6.2 Taxes

Fees are exclusive of applicable taxes (including VAT). Where required, Stripe will collect and remit taxes on our behalf based on the billing address you provide.

6.3 Cancellation and refunds

You may cancel a Paid Tier at any time from your dashboard. Cancellation takes effect at the end of the current Subscription Term. Fees already paid are non-refundable except where required by applicable consumer-protection law (for example, the 14-day right of withdrawal under EU Directive 2011/83/EU, which you waive when you begin using the Service before the withdrawal period expires).

6.4 Free Tier

Free Tier accounts have no payment obligation. We may modify or discontinue the Free Tier at any time without notice.

6.5 Failed payments

If a renewal payment fails, the Account will be downgraded to the Free Tier after a reasonable retry window (typically 7 to 14 days). Premium and Max features will be deactivated when the downgrade takes effect. You can restore the subscription by updating the payment method and reactivating from your dashboard.

7.1 Customer Data

You retain all rights in your Customer Data. You grant vulneraibility a limited licence to use Customer Data solely to operate, maintain, and improve the Service and to fulfil our obligations under these Terms.

7.2 Feedback

If you submit suggestions, ideas, or feedback, you grant vulneraibility a perpetual, royalty-free, worldwide licence to use them without restriction. You waive any moral rights in such feedback to the extent permitted by applicable law.

CVE summaries, severity scores, AI-generated guidance, and remediation suggestions are informational only. You remain solely responsible for evaluating and acting on security information relevant to your environment. vulneraibility does not warrant that the Service will be uninterrupted, error-free, or that all defects will be corrected.

Some jurisdictions do not allow the exclusion of certain warranties; in those jurisdictions, the above disclaimers apply to the maximum extent permitted by law.

IN NO EVENT WILL VULNERAIBILITY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR IN CONNECTION WITH THESE TERMS EXCEED THE GREATER OF (A) THE AMOUNT YOU HAVE PAID TO US IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED EURO (EUR 100).

The limitations in this Section apply regardless of the legal theory on which the claim is based (contract, tort, statute, or otherwise) and even if vulneraibility has been advised of the possibility of such damages. Nothing in these Terms limits liability that cannot be limited by law, including liability for gross negligence, wilful misconduct, or death or personal injury caused by negligence.

12.1 Your right to terminate

You may terminate your Account at any time from the dashboard. Termination does not entitle you to a refund of fees already paid. Provisions of these Terms that by their nature should survive termination (including Sections 7, 9, 10, 11, and 14) will survive.

Consumers resident in the European Union retain the right to bring proceedings in the courts of their country of residence to the extent required by mandatory consumer-protection law.

• Severability: if any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect.
• No waiver: failure by either party to enforce any right under these Terms does not waive that right.
• Assignment: you may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets, with notice.
• Force majeure: neither party is liable for delay or failure to perform caused by events outside its reasonable control.
• Notices: notices to you may be sent to the email associated with your Account. Notices to us must be submitted via our contact page.
• Language: in the event of discrepancy between translated versions of these Terms, the English version controls.