Terms of Service

WatchMyCVE identifies the software a public website runs, watches public CVE feeds (CVE.org, CISA KEV and FIRST EPSS) for that software, and alerts you. It is not a vulnerability scanner and never tests or attacks your site. Stack detection is in Beta.

Detection can miss software or versions, and public feeds can be late, incomplete or wrong. An alert, or the absence of one, is not a security assessment. You remain responsible for securing and updating your websites.

You sign in with GitHub and must be at least 16. Keep your access tokens secret. You are responsible for what happens through your account, including actions taken by scripts or AI agents that use your tokens.

Only add websites you operate or have permission to monitor. You allow us to request the public pages of those websites, as described on our Security page.

You agree to follow the Acceptable Use Policy, which is part of these terms.

The Free plan costs nothing, with the limits shown on the pricing page. Paid plans can't be bought yet. When they can, the price and payment terms will be shown before you pay.

Your data stays yours. You allow us to process it only to run the service, as described in the Privacy Policy.

Alerts are deleted automatically after the period your plan keeps them: 4 days on Free, 14 days on Pro and 29 days on Agency. Deleted alerts can't be recovered.

CVE records, the KEV catalog and EPSS scores come from their publishers, are subject to their terms, and are provided as they are.

The service is provided as it is, without a guaranteed uptime. We may change, add or remove features. We'll tell you in advance about changes that significantly reduce what you use.

You can delete your account at any time in Settings. We may suspend or close an account that breaks these terms or the Acceptable Use Policy, or to protect other people, and we'll tell you why when we can.

As far as the law allows, we are not liable for indirect losses, lost profits, lost data, or for security incidents on your websites. Our total liability is limited to what you paid us in the 12 months before the claim.

Nothing in these terms limits liability that cannot be limited by law, such as for intent or gross negligence, or your rights as a consumer under mandatory law.

We'll give at least 30 days' notice in the app before significant changes take effect. If you don't agree, you can delete your account before then. Continuing to use the service after that means you accept the new terms.

These terms are governed by the laws of Tunisia. If you are a consumer, you keep the protection of the mandatory laws of the country where you live, and you can bring a claim there.

Email contact@watchmycve.com or use the contact form.