shipapis
StarSubmit an APISubmit API

Microsoft Security Response Center (MSRC) vs National Vulnerability Database

Same instrument, two spec sheets — measured, not claimed.

APIMicrosoft Security Response Center (MSRC)HEALTHY92National Vulnerability DatabaseDYING78
Uptime · 30d
Uptime · 90d100%86.3%
Uptime · 30d100%83.3%
P50 · ms538974
P95 · ms11074777
Authnonenone
CORSnono
HTTPSyesyes
Card requirednono
Commercial useunclearyes
Data licenseUnverifiedPublic domain (U.S. Government work)
Free tierFree — no key requiredFree — no key required (free key raises limits)
Rate limitUnpublished5 requests per rolling 30 seconds without an API key (50 with a free key)
In directory since2026-07-052026-07-05
operationalpartialdownno data

Microsoft Security Response Center (MSRC) vs National Vulnerability Database: common questions

Which is more reliable, Microsoft Security Response Center (MSRC) or National Vulnerability Database?

On our scheduled checks, Microsoft Security Response Center (MSRC) leads on measured uptime — Microsoft Security Response Center (MSRC) at 100% versus National Vulnerability Database at 86.3% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Which is faster, Microsoft Security Response Center (MSRC) or National Vulnerability Database?

Microsoft Security Response Center (MSRC) has the lower median latency in our checks — Microsoft Security Response Center (MSRC) responds in 538 ms versus National Vulnerability Database at 974 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do Microsoft Security Response Center (MSRC) and National Vulnerability Database need an API key?

Neither needs a paid key — Microsoft Security Response Center (MSRC) is callable with no signup, and National Vulnerability Database is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call Microsoft Security Response Center (MSRC) and National Vulnerability Database from the browser?

Neither sends browser-friendly CORS headers reliably, so call Microsoft Security Response Center (MSRC) and National Vulnerability Database from a server or proxy rather than client-side. The CORS and HTTPS rows above show exactly what we detected for each.

Are Microsoft Security Response Center (MSRC) and National Vulnerability Database free for commercial use?

Microsoft Security Response Center (MSRC) has unclear commercial terms, and National Vulnerability Database allows commercial use on its free tier. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.