Terms of Service

You must be at least 18 years old, located in the United States, and authorized to act on behalf of the organization you register, to use the Service.

CVE.GMBH provides passive reconnaissance of publicly available information about domains and IP addresses, active vulnerability scanning of targets you have authorized, correlation with known CVE/CVSS/EPSS/KEV data, AI-assisted remediation guidance, and reporting.

You may submit a target (domain, IP address, or IP range) for ACTIVE scanning only if your organization owns that target, or holds documented written authorization from its owner to scan it. Active scanning of a system you are not authorized to scan can constitute a federal crime under the Computer Fraud and Abuse Act (18 U.S.C. § 1030) and comparable state laws, and CVE.GMBH will not assume that liability on your behalf.

When you attest ownership, sign a consent to automatic re-authorization, or otherwise confirm authorization through the Service, that action is a binding representation by you and your organization, recorded together with your identity, timestamp, and IP address (see our Privacy Policy). You are solely and fully responsible for the truth of every such representation, and for any consequence of a false one — including claims by the actual owner of a target, and any law-enforcement inquiry.

You must promptly stop scanning and remove authorization for any target your organization no longer owns or has permission to scan.

You will not: use the Service to scan a target without the authorization described in Section 3; attempt to disrupt, degrade, or deny service to any target or to CVE.GMBH's own infrastructure; use the Service to develop or deploy exploit code against a target; circumvent rate limits, quotas, or the authorization gateway; resell or provide third-party access to the Service without our written consent; or use the Service for any unlawful purpose.

AI-generated remediation guidance is provided for defensive purposes only, is generated by a third-party AI model based on your findings, and may be inaccurate or incomplete. It is not a substitute for professional security judgment. You remain responsible for validating and implementing any remediation.

You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Access levels, quotas, and (once introduced) subscription fees are described in your plan or order form.

CVE.GMBH and its licensors own the Service and all underlying technology. You retain ownership of the data you submit and the findings generated for your account. You grant us a license to process that data solely to provide the Service to you.

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. WE DO NOT WARRANT THAT THE SERVICE WILL DETECT ALL VULNERABILITIES, THAT SCAN RESULTS ARE COMPLETE OR ERROR-FREE, OR THAT USE OF THE SERVICE WILL PREVENT A SECURITY INCIDENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CVE.GMBH WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES, OR FOR ANY DAMAGES ARISING FROM YOUR UNAUTHORIZED USE OF THE SERVICE TO SCAN A TARGET YOU WERE NOT AUTHORIZED TO SCAN. OUR TOTAL LIABILITY FOR ANY CLAIM WILL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM AROSE.

You will indemnify and hold CVE.GMBH harmless from any claim, loss, or liability — including from a target owner or a law-enforcement authority — arising from your breach of Section 3 (Authorized Use Only) or from a false attestation or consent you provided through the Service.

We may suspend or terminate your access immediately, including via the Service's kill switch, if we reasonably believe you have violated Section 3 or 4, or for non-payment. You may stop using the Service at any time.

These Terms are governed by the laws of the State of Colorado, United States, without regard to conflict-of-law principles.

We may update these Terms from time to time; material changes will be highlighted and take effect as stated in the update.

Questions about these Terms can be sent to [email protected].