1. About these terms
Welcome to VulnBeacon. These terms cover our public website: the pages anyone can read without signing in, such as the description of the product, its examples and these legal pages.
“VulnBeacon”, “we”, “us” and “our” mean the company that operates VulnBeacon, identified in our Legal notice. You can write to us at contact@vulnbeacon.com.
The VulnBeacon service itself, with its accounts, API, integrations and MCP service, is covered by our Terms of service. Our Privacy notice explains how we handle personal information.
Browsing the website creates no subscription. These terms do not replace an agreement you have with us, and they do not restrict any right the law gives you.
2. Using the website
Browse the website freely to learn about VulnBeacon and to judge whether it meets your needs. You may download or print reasonable extracts for your own reference or for your organisation’s internal evaluation, provided you keep the copyright and attribution notices.
Use the website lawfully. You must not:
- Try to access accounts, information or systems without permission.
- Introduce malicious code, disrupt the website or deliberately overload it.
- Bypass access restrictions, rate limits or security controls.
- Impersonate another person or misrepresent your relationship with VulnBeacon.
- Harvest personal information, or redistribute substantial parts of our content without permission or another lawful basis.
- Use our name, branding or content in a way that falsely suggests our endorsement.
Ordinary indexing by search engines, and any use an applicable licence permits, remain allowed. Access to product data through the API is governed by the Terms of service and by what the key used allows.
3. Content and intellectual property
The website’s original text, design, graphics and software belong to VulnBeacon or its licensors. Visiting the website transfers no ownership of them.
Vulnerability records, package information, standards, trademarks and other third-party material remain subject to their owners’ rights and licences. Where material carries a licence of its own, that licence governs your use of it.
You may link to our public pages, provided the link is accurate and does not suggest a relationship or an endorsement that does not exist.
4. Understanding our information
VulnBeacon helps people understand software dependencies, vulnerability exposure and release decisions. Our public descriptions and examples explain the service; they are not an assessment of your software or your circumstances.
Security information changes. A vulnerability may be newly discovered, disputed, reclassified or corrected, and package matching and remediation guidance depend on how complete and accurate the available information is.
We take care over our content, but it is no guarantee that a system is secure and no complete statement of your legal obligations. Readiness indicators and framework mappings are not certifications, regulatory approvals or legal advice.
None of this reduces a specific commitment in your service agreement, or a right that cannot lawfully be excluded.
5. External links
The website may link to vulnerability advisories, package registries, integration providers and other independent services, which operate under their own terms and privacy notices.
A link is there for context or convenience; it does not mean we endorse everything on the destination website. Check the destination before you share credentials, personal information or confidential material there.
6. Availability
We may update the website, correct errors, or restrict access for a while for maintenance, security or operational reasons.
We aim to keep the public website useful and accessible, but it carries no uptime commitment of its own. If you subscribe to the service, its availability and support are governed by your service agreement.
7. Contact and security reports
Send questions, corrections, concerns or complaints to contact@vulnbeacon.com, sharing only information you are entitled to share. Never include a password, a key or personal information we do not need in a first message.
If you believe you have found a security issue, describe the affected feature and what we need to understand the issue. Reporting a vulnerability does not, by itself, authorise testing our systems, accessing another person’s information or disrupting the service.
8. Responsibility and legal rights
Each party remains responsible for its own conduct under the applicable law.
Nothing in these terms excludes or limits responsibility for fraud, fraudulent misrepresentation, death or personal injury caused by negligence where applicable, or anything else that cannot lawfully be excluded or limited.
If you are a consumer, these terms take away none of your mandatory consumer protections and do not prevent you from using the courts and remedies the applicable law gives you.
9. Changes and disputes
We may revise these terms when the website, our practices or the applicable requirements change; the date at the top shows the version in force. A change applies from then on and does not rewrite rights or claims that have already arisen. Where the law requires notice or agreement, we will give or obtain it.
Unless a valid separate agreement provides otherwise, the applicable law determines the governing law and the competent courts. Mandatory consumer protections remain unaffected.