shipapis
StarSubmit an APISubmit API

Microsoft Security Response Center (MSRC) vs National Vulnerability Database

Same instrument, two spec sheets — measured, not claimed.

APIMicrosoft Security Response Center (MSRC)HEALTHY94National Vulnerability DatabaseHEALTHY87
Uptime · 30d
Uptime · 90d100%91.7%
Uptime · 30d100%93.3%
P50 · ms358263
P95 · ms19514448
Authnonenone
CORSnoyes
HTTPSyesyes
Card requirednono
Commercial useunclearyes
Data licenseUnverifiedPublic domain (U.S. Government work)
Free tierFree — no key requiredFree — no key required (free key raises limits)
Rate limitUnpublished5 requests per rolling 30 seconds without an API key (50 with a free key)
In directory since2026-07-052026-07-05
operationalpartialdownno data

Microsoft Security Response Center (MSRC) vs National Vulnerability Database: common questions

Which is more reliable, Microsoft Security Response Center (MSRC) or National Vulnerability Database?

On our scheduled checks, Microsoft Security Response Center (MSRC) leads on measured uptime — Microsoft Security Response Center (MSRC) at 100% versus National Vulnerability Database at 91.7% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Which is faster, Microsoft Security Response Center (MSRC) or National Vulnerability Database?

National Vulnerability Database has the lower median latency in our checks — Microsoft Security Response Center (MSRC) responds in 358 ms versus National Vulnerability Database at 263 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do Microsoft Security Response Center (MSRC) and National Vulnerability Database need an API key?

Neither needs a paid key — Microsoft Security Response Center (MSRC) is callable with no signup, and National Vulnerability Database is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call Microsoft Security Response Center (MSRC) and National Vulnerability Database from the browser?

Only National Vulnerability Database is browser-friendly — it returns CORS headers over HTTPS. Microsoft Security Response Center (MSRC) needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are Microsoft Security Response Center (MSRC) and National Vulnerability Database free for commercial use?

Microsoft Security Response Center (MSRC) has unclear commercial terms, and National Vulnerability Database allows commercial use on its free tier. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.