shipapis
StarSubmit an APISubmit API

Microsoft Security Response Center (MSRC) vs dead-drop

Same instrument, two spec sheets — measured, not claimed.

APIMicrosoft Security Response Center (MSRC)NEW—dead-dropNEW—
Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms——
P95 · ms——
Authnonenone
CORSnoyes
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree — no key requiredFree — limits not published
Rate limitUnpublished100 req/window · 100 remaining · resets 1783513841
In directory since2026-07-052026-07-05
operationalpartialdownno data

Microsoft Security Response Center (MSRC) vs dead-drop: common questions

Which is more reliable, Microsoft Security Response Center (MSRC) or dead-drop?

On our scheduled checks, dead-drop leads on measured uptime — Microsoft Security Response Center (MSRC) at —% versus dead-drop at —% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Do Microsoft Security Response Center (MSRC) and dead-drop need an API key?

Neither needs a paid key — Microsoft Security Response Center (MSRC) is callable with no signup, and dead-drop is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call Microsoft Security Response Center (MSRC) and dead-drop from the browser?

Only dead-drop is browser-friendly — it returns CORS headers over HTTPS. Microsoft Security Response Center (MSRC) needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are Microsoft Security Response Center (MSRC) and dead-drop free for commercial use?

Microsoft Security Response Center (MSRC) has unclear commercial terms, and dead-drop has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.