shipapis
StarSubmit an APISubmit API

CVEDB vs Microsoft Security Response Center (MSRC)

Same instrument, two spec sheets — measured, not claimed.

APICVEDBUNMONITORED—Microsoft Security Response Center (MSRC)NEW—
Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms——
P95 · ms——
Authnonenone
CORSnono
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree — limits not publishedFree — no key required
Rate limitUnpublishedUnpublished
In directory since2026-07-052026-07-05
operationalpartialdownno data

CVEDB vs Microsoft Security Response Center (MSRC): common questions

Which is more reliable, CVEDB or Microsoft Security Response Center (MSRC)?

Only Microsoft Security Response Center (MSRC) is on our probe schedule so far (—% uptime over 90 days). The other is catalogued but not yet live-checked, so we can't compare measured reliability head-to-head — check the uncovered API's own status page for now.

Do CVEDB and Microsoft Security Response Center (MSRC) need an API key?

Neither needs a paid key — CVEDB is callable with no signup, and Microsoft Security Response Center (MSRC) is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call CVEDB and Microsoft Security Response Center (MSRC) from the browser?

Neither sends browser-friendly CORS headers reliably, so call CVEDB and Microsoft Security Response Center (MSRC) from a server or proxy rather than client-side. The CORS and HTTPS rows above show exactly what we detected for each.

Are CVEDB and Microsoft Security Response Center (MSRC) free for commercial use?

CVEDB has unclear commercial terms, and Microsoft Security Response Center (MSRC) has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.