You can have your own private VulnIQ instance for a very reasonable total cost of ownership.
Supported data types:
- Vendor advisories
- Open Vulnerability and Assessment Language, OVAL, definitions
- CWE and CAPEC data
- Threat data in STIX 2.0 format
- Any git repository
- Any web page
- RSS or Atom feeds
- Github issues
- and more...
You must send the token in the Authorization header. For example:
curl -v \ -H "Authorization: Bearer eyJzdWIiOiJXX0F..." \ 'https://free.vulniq.com/api/vulnerability/list'
Terms and Conditions
Please read the terms and conditions carefully.
VulnIQ Free Version Terms and ConditionsLast updated: 2020-06-24
From this point on 'We' or 'VulnIQ' denote SBOsoft A.S. the provider of this service, 'You' denotes the user of this Service. Please scroll down and read the following terms and conditions, 'Agreement' from this point on.
By signing in or clicking 'an I agree button/link' (or a similar expression of acceptance) You agree that this Agreement forms a legally binding agreement between You and VulnIQ.
If You do not agree to these terms, do not sign in, and do not attempt to access or use the Service. These terms and conditions may change from time to time and You must read and accept the latest version of this agreement, before using this service. Your continued use of the Service constitutes Your acceptance of the changed terms of this Agreement.
Rights To Use The Service
- This Service is solely for Your own internal use as permitted by this Agreement.
- You may not use VulnIQ as part of a commercial offering.
- You may not sublicense, license, sell, lease, rent, outsource or otherwise make VulnIQ available to third parties.
- You may not access or use the Service in order to develop a competing product or service.
- VulnIQ may prevent You from accessing this service, completely under VulnIQ's own discretion.
- VulnIQ may stop providing this Service at any time without providing any replacements.
- VulnIQ has no obligation to provide the Service.
- Please see further sections of this Agreement for more details.
What's includedThe Service includes a free version of VulnIQ platform software, hosted on a server managed by VulnIQ.
The Service is hosted on a server provided by Digital Ocean in one of their Amsterdam data centers.
VulnIQ does not provide any availability guarantees for this Service. Data included in this Service is not guaranteed to be complete or accurate. Any data may be changed or deleted by VulnIQ without any prior notice.
RestrictionsYou shall not sublicense, license, sell, lease, rent, outsource or otherwise make the Service available to third parties. You shall be responsible for the acts and omissions of anyone accessing the Service with Your access credentials as if they were Your acts and omissions.
VulnIQ has no obligation to include or remove any functionality from the Service in any future version or in any VulnIQ product.
You may not access or use the Service in order to develop a competing product or service.
Intellectual PropertyAll rights not expressly granted to You in this Agreement are reserved by VulnIQ.
Acceptable UseWhen using the Service, You shall not, and shall ensure that any other user accessing the Service under your account does not:
- translate, decompile, reverse-engineer or otherwise modify any parts of the Service
- transmit any content, data or information that is unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, invasive of another's privacy or right of publicity, hateful, or racially, ethnically or otherwise objectionable;
- infringe the intellectual property rights of any entity;
- interfere with or disrupt the VulnIQ software or VulnIQ systems used to host the Service, or other equipment or networks connected to the Service, or disobey any requirements, procedures, policies or regulations of networks connected to the Service made known to You;
- circumvent the user authentication or security of the Service or any host, network, or account related thereto;
- use any application programming interface to access the Service other than those made available by VulnIQ
- make any use of the Service that violates any applicable local, state, national, international or foreign law or regulation;
- allow any third party to use any user identification(s), code(s), password(s), procedure(s) and user keys issued to, or selected by, You for access to the Service
- access or use the Service for any purpose that is competitive with VulnIQ.
External Links and third party contentThe Service contains links to external web sites. VulnIQ shall not be responsible for the contents of any linked Web site, or any changes or updates to such sites. You further agree that VulnIQ shall not be directly or indirectly responsible or liable for any damage or loss caused or alleged to be caused by or in connection with Your use of or reliance on any content, goods or services made available on the Service by another user or through any linked web site.
The Service includes content provided by third parties. All Content is provided "as is", and VulnIQ makes no warranty as to the accuracy or completeness of such Content. You use such Content at Your own risk, and VulnIQ shall have no liability to You or any third party based on Your use of or reliance on such Content.
WarrantyTHIS SITE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT we WILL BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY IN ANY WAY. THE SERVICE IS PROVIDED "AS IS" WITHOUT ANY WARRANTY, ESCROW, TRAINING, MAINTENANCE, OR SERVICE OBLIGATIONS WHATSOEVER. VulnIQ DISCLAIMS ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR A PARTICULAR PURPOSE, AND CONDITIONS OF MERCHANTABLE QUALITY, WHETHER ARISING BY STATUTE OR IN LAW OR AS A RESULT OF A COURSE OF DEALING OR USAGE OF TRADE.
The Service relies on the Google Analytics service and your information will be shared with the provider of Google Analytics service and may be stored and processed on Google servers. Google analytics collects certain information about your visit, such as the name of the Internet service provider; the date and time you access the site; the pages that you access while at the website and the Internet address of the website from which you linked to our website. This information is used to help improve the website, analyze trends and administer the website.
When you sign in using a third party identity provider, your name and email address will be queried from your identity provider and will be stored in our records. You agree to sharing this information by using the Service.
We may use your email address to occasionally contact you to inform you about our products and services.
For users from the European Union: Your personal information may be stored and processed outside the European Union, you agree to this by using this service.
Except as otherwise described in this statement, personal information you provide on the website will not be shared outside of VulnIQ organization.
If you want your personal information to be removed from our systems, please send an email to firstname.lastname@example.org.
ConfidentialityYou must not add any confidential data to this Service in any way. VulnIQ assumes that all data you add to this Service is non-confidential.
Limitation of LiabilityIN NO EVENT SHALL VulnIQ BE LIABLE TO YOU, YOUR COMPANY OR TO ANY THIRD PARTY FOR ANY DAMAGES IN AN AMOUNT IN EXCESS OF (USD) $1 ARISING IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICE, OR AS A RESULT OF ANY DEFECT IN THE SERVICE. THIS DISCLAIMER OF LIABILITY SHALL APPLY REGARDLESS OF THE FORM OF ACTION THAT MAY BE BROUGHT AGAINST VulnIQ, WHETHER IN CONTRACT OR TORT, INCLUDING WITHOUT LIMITATION ANY ACTION FOR NEGLIGENCE. YOUR SOLE REMEDY IN THE EVENT OF BREACH OF THIS AGREEMENT BY VulnIQ OR FOR ANY OTHER CLAIM RELATED TO THE SERVICE SHALL BE TERMINATION OF THIS AGREEMENT. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN, UNDER NO CIRCUMSTANCES SHALL VulnIQ AND ITS LICENSORS BE LIABLE TO YOU OR ANY OTHER PERSON OR ENTITY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR INDIRECT DAMAGES, LOSS OF GOOD WILL OR BUSINESS PROFITS, WORK STOPPAGE, DATA LOSS, COMPUTER FAILURE OR MALFUNCTION, ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSS, OR EXEMPLARY OR PUNITIVE DAMAGES.
Third Party ClaimsYou shall indemnify and hold VulnIQ harmless from third party claims arising from or related to (i) any use of the Service (a) in breach of this Agreement; or (b) in violation of any applicable law or regulation; or (ii) an allegation that Your use of the Service violates, infringes or misappropriates the rights of a third party. The foregoing shall apply regardless of whether such damage is caused by Your conduct or by the conduct of a third party using Your access credentials. The foregoing is, however, conditional upon VulnIQ (i) notifying You thereof in writing and in detail without undue delay; (ii) authorizing You to conduct any judicial and extrajudicial proceedings with such third party on its own; and (iii) providing You, at Your expense, with any reasonable assistance so that You can defend against the claim. You are permitted to fully control the defense and any settlement of any such claim as long as such settlement does not include a financial obligation on VulnIQ. In the event VulnIQ declines Your proffered defense, or otherwise fails to cede full control of the defense to Your designated counsel, then VulnIQ waives Your obligations under this Section. VulnIQ shall fully cooperate in the defense of such claim and may appear, at its own expense, through counsel of its own choosing.
Term and TerminationThe term of this Agreement shall begin on the date you first access the Service and shall end upon termination by either party in accordance with this Agreement. VulnIQ may stop providing this Service at any time. VulnIQ may suspend Your access to the Service at any time, in VulnIQ's sole judgment, without providing any reasons, explanations or compensation.
SupportVulnIQ does not provide any support services for this Service.
Copyright PolicyIf You believe that your work has been copied in a way that constitutes copyright infringement or any other violation of your rights, please contact email@example.com with the details of your complaint.
ContactIf you have questions or concerns about this or any other policy, you can contact us at: firstname.lastname@example.org.