Read the docs

Terms of use

Last updated

These terms apply when you use threatist.io and the Threatist API. In short: you can use our data for free, also commercially, if you credit Threatist and stay within the limits. You may not resell our database. The data comes as is, without a guarantee.

1. Who we are

Threatist (threatist.io) is run by Bartłomiej Nogieć. You can reach him at [email protected].

2. What Threatist offers

Public vulnerability pages and search on threatist.io, and a read-only API at threatist.io/v1. Both are free and need no account. You need a current web browser, or for the API any HTTP client that reads JSON.

The newsletter is covered by the consent you give when you subscribe and by our privacy policy.

3. Using the data

You may use, copy and publish the data Threatist creates, also commercially and free of charge, if you credit "Data from Threatist" with a link to threatist.io or to the record. This covers Threatist ids, priority score and band, summaries, impact type, fix status and merged records.

Data from our sources stays under the sources' own terms. Each record and the Sources and licences page list them, and the API names the source and licence of every value. You must follow those terms too, for example the CC BY 4.0 attribution and the NVD notice.

4. What you may not do

  • Sell or license our data as such.
  • Publish a copy of our database, or a substantial part of it, as your own service or dataset.
  • Get around the limits, for example by spreading requests across addresses.
  • Disrupt the service or put it at risk.
  • Suggest that Threatist endorses you or your product.
  • Use the data unlawfully.

5. API limits

Without a key you can make up to 60 requests a minute and 1,000 a day per address. Above the limit the API answers 429 with Retry-After. We may change the limits.

We may block addresses or clients that break these terms or put the service at risk.

6. No guarantee

The data comes from public sources and automated processing, including summaries written by AI. It can be incomplete, late or wrong. It is provided as is and is not advice, so check with the vendor before you act on it. The service can be unavailable, changed or ended.

As far as the law allows, we are not liable for damage caused by using the data or by the service being unavailable. This does not limit liability that the law does not allow us to limit.

7. Complaints

Write to [email protected] with a description of the problem. We answer within 14 days.

8. Changes

When these terms change we update the date at the top of this page. We announce material changes on the site 14 days before they apply. You can stop using Threatist at any time.

9. Law

These terms are governed by Polish law. If you are a consumer, you keep the protection of the mandatory law of your country and your right to go to your own courts.