Terms of Service

Effective 29 October 2026

These terms govern your use of the CVEfocus website, dashboard and API (the "Service"), operated by Ideaflo, Inc. ("we", "us"). By creating an account or using an API key you agree to them. If you use the Service for an organisation, you confirm you may accept these terms on its behalf.

1. The Service

CVEfocus matches software inventories you submit against publicly available vulnerability data and returns information about which known vulnerabilities may apply, whether fixes exist and suggested priorities. The Service is an information tool. Read the Disclaimer, which forms part of these terms.

2. Your account and API keys

• You need a valid email address you control. One free account per person or organisation.
• Keep your API keys secret. You are responsible for all use of your keys. Revoke a key immediately in the dashboard if it may have been exposed.
• We may suspend keys or accounts that put the Service, its users or third parties at risk.

3. Acceptable use

You must not:

• exceed or work around plan limits, for example with multiple free accounts or shared keys;
• scrape, bulk-download or resell the Service's data or results as a competing data feed;
• attack, overload, probe or reverse-engineer the Service, or interfere with other users;
• submit data you have no right to submit, or personal data, secrets, credentials or hostnames;
• use the Service to plan or carry out attacks on systems you are not authorised to test, or for any unlawful purpose.

4. Plans and limits

Each plan has a daily limit on distinct products checked, shown in your dashboard and in every API response, and a per-minute request limit. Paid plans, when offered, will be described at the time of purchase. We may change free plan limits with reasonable notice.

5. Your data

You keep all rights to the inventories you submit. You grant us only the right to process them, transiently, to provide the answer. We do not store them. See the Privacy Policy.

6. Our data and third-party data

The Service is built on data from third parties (see the Disclaimer for sources). Their terms continue to apply to that data. Results you receive are for your own internal security work; you may share them within your organisation and with your auditors and service providers.

7. Availability and changes

We aim for high availability but do not guarantee the Service will be uninterrupted or error-free. We may change, add or remove features. We will give reasonable notice before removing an API endpoint you rely on, where we can.

8. No warranty

To the extent permitted by law, the Service and all results are provided "as is" and "as available", without warranties of any kind, express or implied, including fitness for a particular purpose, accuracy, completeness and non-infringement.

9. Limitation of liability

To the extent permitted by law, we are not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, revenue, data or business, or for security incidents, arising from your use of or reliance on the Service. Our total liability for any claim relating to the Service is limited to the greater of the amount you paid us for the Service in the 12 months before the claim and 100 US dollars. Nothing in these terms limits liability that cannot be limited by law, such as for fraud or for death or personal injury caused by negligence.

10. Indemnity

You will indemnify us against claims by third parties arising from your breach of these terms or your unlawful use of the Service.

11. Ending

You may stop using the Service and delete your account at any time. We may end or suspend your access if you materially breach these terms, or end the free plan with 30 days' notice. Sections 6 to 12 survive termination.

12. Law and disputes

These terms are governed by the laws of the jurisdiction in which Ideaflo, Inc. is incorporated, and its courts have jurisdiction, without depriving consumers of the protection of the mandatory laws of their country of residence. Before going to court, contact us at info@cvegroup.com so we can try to resolve the issue informally.

13. Changes to these terms

We may update these terms. For material changes we will email account holders at least 14 days before they take effect. Continuing to use the Service after that means you accept the new terms.

14. Contact

Ideaflo, Inc.. Email: info@cvegroup.com.