Terms of Service

1. Who we are; acceptance

FAUCET is operated by FAUCET Technologies LLC, 1717 N Street Northwest, STE 1, Washington, DC 20036. By creating an account or using the service, you agree to these Terms and our Privacy Policy.

If you use FAUCET on behalf of an organization, you represent that you are authorized to bind that organization to these Terms.

2. The service

FAUCET ingests public vulnerability intelligence (including MITRE, NVD, EPSS, CISA KEV, CWE, exploit sources, vendor advisories, and social/media signals), enriches and scores it, and delivers it through the web application, an API, an MCP server, email alerts, webhooks, and Slack.

We may add, change, or remove features over time. We will not make a material, adverse change to a paid feature you rely on without reasonable notice.

3. Cookies and access

FAUCET uses strictly necessary cookies to keep you signed in and to enforce the usage limits and feature permissions of your plan, including the free-lookup limit for visitors without an account. These are required to use FAUCET. Full detail is in our Privacy Policy.

FAUCET also uses Cloudflare Web Analytics to understand aggregate site traffic. It does not use cookies and does not identify individual visitors. By using FAUCET, you agree to our use of cookies as described in this section and our Privacy Policy.

4. Accounts and security

You must provide accurate account information and keep your credentials secure. You are responsible for activity under your account.

Two-factor authentication is required for paid (Pro and Team) accounts. You must not share accounts or seats except as expressly permitted by your plan.

5. Plans, billing, and the launch-pricing commitment

FAUCET offers a free tier and paid tiers (Pro and Team), available on monthly or annual billing. Current plans, limits, and prices are shown on our pricing page, which is incorporated by reference.

Paid subscriptions are billed in advance through our payment processor (Stripe). Unless otherwise stated, fees are non-refundable except where required by law. You authorize recurring charges until you cancel.

Launch-pricing commitment: for the first 100 paying customers, the launch price in effect at the time of subscription is intended to remain fixed for that subscription for as long as it stays active and in good standing (the "grandfather" commitment). The precise scope, conditions, and any exclusions of this commitment are subject to the final terms counsel approves; this draft language is not the final promise.

6. Acceptable use

You may use FAUCET only for lawful purposes and in accordance with your plan's limits, including API and MCP rate limits. You must not attempt to circumvent those limits or to disrupt the service.

• No reselling, sublicensing, redistributing, or otherwise making FAUCET data available to any third party, in raw, aggregated, derived, or reformatted form, and no incorporating FAUCET data into any product, service, dataset, or tool you make available to others, whether free or paid, except under a separate written OEM/data-licensing agreement with us. See our Data Licensing Terms for the full scope of this restriction.
• No scraping or bulk extraction beyond your plan's documented API or MCP allowances, including through automated tools or repeated manual requests designed to reconstruct bulk access.
• No use of FAUCET data to build, train, or improve a competing product or dataset that you offer or intend to offer to others.
• No removing or obscuring FAUCET attribution or source labeling from data you are authorized to export.
• No unlawful, infringing, or abusive use, and no attempts to breach the security of the service or other users.

Unauthorized resale, redistribution, or commercial reuse of FAUCET data is a material breach of these Terms. If we believe you have violated this section, we may suspend or terminate your account immediately and without notice, in addition to pursuing any other remedy available to us, including injunctive relief, damages, and recovery of our costs and reasonable attorneys' fees.

7. Ownership; our data product

FAUCET, including its software, website, branding, and the compiled, enriched, and scored data product we generate from public vulnerability sources (including the FAUCET Risk Score, exploit predictions, per-source attribution mappings, and CPE/CWE/CNA mappings), is owned by FAUCET Technologies LLC and our licensors. Your subscription grants you a license to use FAUCET as described in these Terms and, where applicable, our Data Licensing Terms. It does not transfer any ownership rights to you.

FAUCET's enrichment and scoring are built on public source data, including MITRE, NVD, CISA KEV, and vendor and CNA advisories. We do not claim ownership of that underlying public source data. Your rights to that raw source data are whatever the original publisher grants; our ownership claim is limited to FAUCET's own compiled, enriched, and scored output.

8. AI-generated content

Parts of FAUCET's output are generated by automated and AI systems, including CVE enrichment, summaries, the FAUCET Risk Score, and the machine-learning exploit predictor. AI-generated content can be incomplete or wrong.

We disclose this so you can weigh it accordingly: treat AI-generated output as one input to your own judgment, not as a verified fact or a recommendation.

9. No warranty on intelligence; not professional advice

FAUCET's intelligence is provided for informational purposes only. We do not warrant that any enrichment, mapping, risk score, exploit prediction, or alert is accurate, complete, current, or fit for any particular purpose.

Nothing in FAUCET is professional, legal, or security advice, and FAUCET's risk predictions are not a guarantee of whether a vulnerability will or will not be exploited. You are solely responsible for decisions you make using the service.

Except as expressly stated, the service is provided "as is" and "as available," to the fullest extent permitted by law.

10. Limitation of liability

To the fullest extent permitted by law, FAUCET and its operator will not be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising out of or related to your use of the service.

Our aggregate liability for any claim relating to the service will not exceed the amounts you paid to us for the service in the twelve months before the event giving rise to the claim. This limitation does not apply to, and does not cap, our right to seek injunctive or other equitable relief, or damages, for your breach of Section 6 (Acceptable use) or our Data Licensing Terms. Final caps and carve-outs are subject to counsel review.

11. Termination

You may stop using FAUCET and cancel your subscription at any time. We may suspend or terminate access for breach of these Terms, for non-payment, or as needed to protect the service or other users.

On termination, your right to use the service ends. Sections that by their nature should survive (including disclaimers, limitations of liability, ownership, and governing law) survive termination.

12. Changes to these Terms

We may update these Terms. When we make material changes, we will update the version and may ask you to re-accept. Your continued use after an update means you accept the updated Terms.

13. Governing law

These Terms are governed by the laws of the District of Columbia, without regard to its conflict-of-laws rules. The exclusive venue for disputes will be the courts located in the District of Columbia, subject to any final dispute-resolution terms counsel approves.

14. Contact

Questions about these Terms:· FAUCET Technologies LLC, 1717 N Street Northwest, STE 1, Washington, DC 20036.