Your Pro licence, on this device
Activate the key from your review email to download the STIX 2.1 bundle. The licence service checks the key on every request, so a revoked or lapsed term stops working immediately — here and in any script that uses it.
Activate your licence
One key per subscriptionPaste the key exactly as it arrived. The first eight characters identify it in our records; the rest never leaves this browser except as an authentication token.
Pro is unlocked
Exports run against this licence until it expires. You can use the same key on another machine; only the remembered copies differ.
—
Only the eight-character prefix is shown, the same part recorded by the admin.
Get the bundle from a script
Send the key as a Bearer token. The response is a STIX 2.1 bundle named by the content-disposition header, and the limit above applies per licence, per minute.
—Questions
What does the licence unlock today?
A STIX 2.1 export of the public vulnerability and indicator feeds, built when you request it. Watchlists, correlated alerts, and signed webhooks are on the roadmap and are not charged for.
Where is my key, and can I get it again?
The key is emailed to the address on the order after a human verifies the transfer, and only a hash is stored. If you lost it, ask for a rotation from the review email; the old key stops working and a new one is issued.
Can I activate the same key on two machines?
Yes. The key is not device-bound. “Remember on this device” only decides whether this browser keeps a copy. Revoking the subscription stops every copy at its next request.
What happens when the term ends?
Exports return an expiry message until the subscription is renewed. Renew with a new order, then activate the new key; the term starts when the payment is approved, not when the old one ends early.
What is stored on my device, and what reaches the server?
The key goes only to api.threats.top, and only when you activate, re-check, or download. This page keeps it in memory, plus localStorage or sessionStorage if you asked to remember it. “Forget this device” clears both, and no analytics service sees the key.