dead-drop vs Microsoft Security Response Center (MSRC)

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms
P95 · ms
Authnonenone
CORSyesno
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree — limits not publishedFree — no key required
Rate limit100 req/window · 100 remaining · resets 1783513841Unpublished
In directory since2026-07-052026-07-05
operationalpartialdownno data

dead-drop vs Microsoft Security Response Center (MSRC): common questions

Which is more reliable, dead-drop or Microsoft Security Response Center (MSRC)?

On our scheduled checks, Microsoft Security Response Center (MSRC) leads on measured uptime — dead-drop at —% versus Microsoft Security Response Center (MSRC) at —% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Do dead-drop and Microsoft Security Response Center (MSRC) need an API key?

Neither needs a paid key — dead-drop is callable with no signup, and Microsoft Security Response Center (MSRC) is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call dead-drop and Microsoft Security Response Center (MSRC) from the browser?

Only dead-drop is browser-friendly — it returns CORS headers over HTTPS. Microsoft Security Response Center (MSRC) needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are dead-drop and Microsoft Security Response Center (MSRC) free for commercial use?

dead-drop has unclear commercial terms, and Microsoft Security Response Center (MSRC) has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.