Terms of Use
Last updated: 24 October 2026
Acceptance
By accessing and using AppSec Pulse, you agree to these terms. If you do not agree, do not use the platform.
Platform Purpose
AppSec Pulse aggregates vulnerability intelligence for software packages, libraries, frameworks, runtimes and the software supply chain. Coverage depends on contributing sources and available evidence. It is not a replacement for SAST, DAST, SCA tools or professional security assessments.
Data Accuracy & Verification
Vulnerability intelligence is sourced from third-party feeds and may contain errors. Stages describe available evidence and can change as records are updated. Early Signal entries should be treated as watch items. Verify critical findings through primary sources before taking action.
AI-Generated Content
The platform uses AI models to generate TL;DRs, deep-dives, and severity assessments. This content is clearly labelled and includes inline citations. Whilst we strive for accuracy, AI-generated content may contain errors. The AI layer is designed to explain and contextualise, not to fabricate.
Scoring & Metrics
Where available, the platform presents CVSS, EPSS and SSVC alongside Pulse Score, AppSec Severity and Confidence Score. These measure different aspects of a vulnerability and are not interchangeable. Use them alongside source evidence and your own exposure assessment.
Acceptable Use
You may use the platform for legitimate security research, vulnerability management, and AppSec workflows. You may not use it to plan attacks, harass researchers, irresponsibly disclose vulnerabilities, or scrape content at scale without permission.
Rate Limits
Access to search and API endpoints is subject to rate limits. Excessive or abusive requests may result in temporary or permanent access restrictions.
ASP Identifiers
For vulns without a CVE, AppSec Pulse assigns an ASP-YYYY-XXXX identifier. When a CVE is assigned, the ASP ID is retained as a secondary reference.
Availability & Retention
Source updates and AI analysis can be delayed or incomplete. Records and associated data may be corrected, merged or removed during maintenance. The feed is not a complete archive of every vulnerability.
Limitation of Liability
AppSec Pulse is provided "as is" without warranty. We are not liable for any damages arising from use of or reliance on platform information.
Contact
For questions: hello@appsecpulse.com