Microsoft Security Response Center (MSRC) vs PhishStats

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms
P95 · ms
Authnonenone
CORSnono
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree — no key requiredFree — limits not published
Rate limitUnpublishedUnpublished
In directory since2026-07-052026-07-05
operationalpartialdownno data

Microsoft Security Response Center (MSRC) vs PhishStats: common questions

Which is more reliable, Microsoft Security Response Center (MSRC) or PhishStats?

On our scheduled checks, PhishStats leads on measured uptime — Microsoft Security Response Center (MSRC) at —% versus PhishStats at —% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Do Microsoft Security Response Center (MSRC) and PhishStats need an API key?

Neither needs a paid key — Microsoft Security Response Center (MSRC) is callable with no signup, and PhishStats is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call Microsoft Security Response Center (MSRC) and PhishStats from the browser?

Neither sends browser-friendly CORS headers reliably, so call Microsoft Security Response Center (MSRC) and PhishStats from a server or proxy rather than client-side. The CORS and HTTPS rows above show exactly what we detected for each.

Are Microsoft Security Response Center (MSRC) and PhishStats free for commercial use?

Microsoft Security Response Center (MSRC) has unclear commercial terms, and PhishStats has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.