shipapis
StarSubmit an APISubmit API

National Vulnerability Database vs Microsoft Security Response Center (MSRC)

Same instrument, two spec sheets — measured, not claimed.

APINational Vulnerability DatabaseNEW—Microsoft Security Response Center (MSRC)NEW—
Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms——
P95 · ms——
Authnonenone
CORSyesno
HTTPSyesyes
Card requirednono
Commercial useyesunclear
Data licensePublic domain (U.S. Government work)Unverified
Free tierFree — no key required (free key raises limits)Free — no key required
Rate limit5 requests per rolling 30 seconds without an API key (50 with a free key)Unpublished
In directory since2026-07-052026-07-05
operationalpartialdownno data

National Vulnerability Database vs Microsoft Security Response Center (MSRC): common questions

Which is more reliable, National Vulnerability Database or Microsoft Security Response Center (MSRC)?

On our scheduled checks, Microsoft Security Response Center (MSRC) leads on measured uptime — National Vulnerability Database at —% versus Microsoft Security Response Center (MSRC) at —% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Do National Vulnerability Database and Microsoft Security Response Center (MSRC) need an API key?

Neither needs a paid key — National Vulnerability Database is callable with no signup, and Microsoft Security Response Center (MSRC) is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call National Vulnerability Database and Microsoft Security Response Center (MSRC) from the browser?

Only National Vulnerability Database is browser-friendly — it returns CORS headers over HTTPS. Microsoft Security Response Center (MSRC) needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are National Vulnerability Database and Microsoft Security Response Center (MSRC) free for commercial use?

National Vulnerability Database allows commercial use on its free tier, and Microsoft Security Response Center (MSRC) has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.