Website terms

1 · What these terms cover

These terms govern your use of this website: the pages, the published research, the underground lexicon and the public feeds. By using the site you accept them.

They do not govern use of the platform. Access to the console and the API is sold under a separate written agreement: an order form, master terms and a data processing agreement. Where anything on this website differs from that agreement, the agreement prevails without exception. Nothing here varies a signed contract.

2 · This site is not an offer

The pages describing modules, capabilities and coverage are marketing material. They describe what the platform does, they are written to be accurate, and they are not a warranty, a specification or a contractual commitment. Capability is committed in the agreement, not on a web page.

Prices published on the pricing page are current list prices in US dollars, exclusive of any applicable taxes. They may change, and a price is fixed for you only by the order form you sign. Figures shown in illustrations, screenshots and sample records are illustrative unless the page marks them as live.

3 · How you may use the site

Read it, quote it with attribution, and link to it. What you may not do:

• scrape, mirror or systematically download the site or its feeds beyond ordinary reading and the published rate limits;
• probe, scan or test the security of the site other than as described on the security page, which sets out how to report a vulnerability responsibly;
• submit the forms with someone else's details, or use them to send bulk, automated or abusive traffic;
• use anything published here to identify, contact, harass or profile an individual named in it;
• present our research as your own, or republish it in full without permission.

4 · Published research

Research posts and lexicon entries are published for the professional security community. They describe activity we observed at a point in time and they are not advice about your particular situation. Underground activity changes quickly; a post is accurate as at its date and we do not undertake to keep every one current.

We do not publish attribution. Nothing on this site names a person, a group or a cluster as responsible for activity. Where a record is shown as an illustration of what the platform produces, it is synthetic and labelled as a sample on the page that shows it.

5 · Availability and accuracy

The site is provided as it is. We do not warrant that it will be uninterrupted or error-free, and we may change or withdraw any part of it.

Several pages display live figures drawn from our own systems. Where a figure cannot be read, the page shows a clearly marked sample, or says the figure is unavailable, rather than presenting a stale number as current. That is a deliberate design commitment and it is worth knowing when you read one: a number without a sample marker is a number we actually fetched.

6 · Links and separate services

The site links to services that are not this website, including our public CVE index at cvekit.com and the customer console. Those have their own terms. We are not responsible for the content of third-party sites we link to.

7 · Intellectual property

The site, its text, its visual design, the diagrams and the published research are ours or licensed to us. The General Intels name and mark are ours. You may quote short extracts with attribution and a link; anything more needs written permission, which we generally give for legitimate research and press use.

8 · Liability

To the extent the law allows, we are not liable for indirect or consequential loss, or for loss of profit, revenue or data, arising from your use of this website. Nothing in these terms excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.

Liability arising from the platform itself is governed by the agreement under which it is supplied, and the limits in that agreement apply there instead of these.

9 · Governing law and changes

These terms, and any dispute arising from them, are governed by the law of the place where the operating entity is established, and the courts of that place have exclusive jurisdiction. The entity and its address are on the imprint page.

We may update these terms; the date at the top of the page moves when we do, and continued use of the site after a change means you accept the updated version.