Plans that match how you use the data
Read everything for free. Pay in crypto when you need the STIX 2.1 export in your own tooling.
For researchers, students, and anyone who needs current public threat data without a key.
- All public pages and JSON feeds
- Global CVE, indicator, and program search
- Per-source freshness and status page
- No account, no API key
- GitHub sign-in and a 3-asset private watchlist roadmap
For analysts and small teams pulling the public feeds into their own pipelines as STIX 2.1.
- Everything in Free
- STIX 2.1 bundle of the current CVE and indicator feeds
- Licence-checked API with a per-key export limit
- Pro console: activation, expiry, key rotation, revocation
- Paid in USDT or BTC, verified by a person
- Private watchlists and correlated alerts roadmap
- Signed webhooks for Splunk, Sentinel, and CrowdStrike roadmap
Already have a key? Open the Pro console.
Public data is free and keyless today. Pro is a licence for the STIX export, paid in crypto and approved by hand; nothing renews automatically and no card details are collected. Roadmap items are labelled and are not charged for.
Compare plans
Entitlements are enforced server-side on every licensed request. Public files stay unkeyed and free.
| Capability | Free | Pro |
|---|---|---|
| Public feeds and pages | Yes | Yes |
| API key | None needed | Licence key |
| STIX 2.1 export | — | Yes |
| Export limit | — | Per licence, per minute |
| Term | No account | 1, 3, or 12 months |
| Payment | — | USDT (TRC20) or BTC |
| Renewal | — | Manual, never automatic |
| Private watchlists | Roadmap | Roadmap |
| Correlated alerts | — | Roadmap |
| Signed webhooks | — | Roadmap |
How Pro onboarding works
No checkout timer, no card form, no surprise renewal. Three steps, with a person checking the payment.
Pick a term and send crypto
Choose 1, 3, or 12 months on the subscribe page and send the amount in USDT (TRC20) or BTC to the wallet shown there.
Report the transfer
Submit your name, email, optional phone, and the transaction ID. You get an order code immediately and can track it from the same page.
Verified, then activated
The transfer is matched by hand, usually within one business day. The licence key is emailed to you and activated on the Pro console.
Questions
Why crypto only?
It keeps card data out of the platform and removes the payment processor dependency. The trade-off is manual verification: a person checks the transaction before the licence is issued. The wallets and the exact network are shown at checkout.
How is a payment verified?
The amount, network, and transaction ID are matched against the order. If the transfer underpaid or needs a second look, the review email says so. Approval issues a licence key and emails it to the address on the order; the order lookup shows the current state until then.
What exactly does the licence unlock?
A STIX 2.1 bundle built from the current public CVE and indicator feeds, plus the Pro console for activation and expiry. Watchlists, alerting, and webhooks are roadmap items and are not charged for.
Can I move the key to another machine?
Yes. The key is not device-bound. “Remember on this device” only decides whether a browser keeps a copy. If a key needs to change, the owner rotates it from the admin panel; the old one stops working at its next request.
Do I need an account to read the data?
No. Every feed under /data/ is a public JSON file with no key and no login. You can fetch it from a script, a notebook, or a SIEM.
Where is my data kept?
Orders, subscriptions, and licence hashes live in a private Cloudflare D1 database, never in the public repository. The site stores no card data, hashes the IP address attached to an order, and ships a review log the owner can audit.
Can I run the collectors myself?
Yes. The repository is public and the collectors use only the Python standard library. See the GitHub repository for the scripts and the field contract.