National Vulnerability Database vs PhishStats

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d86.3%5.9%
Uptime · 30d83.3%1.7%
P50 · ms974240
P95 · ms4777352
Authnonenone
CORSnono
HTTPSyesyes
Card requirednono
Commercial useyesunclear
Data licensePublic domain (U.S. Government work)Unverified
Free tierFree — no key required (free key raises limits)Free — limits not published
Rate limit5 requests per rolling 30 seconds without an API key (50 with a free key)20 req/window · 19 remaining · resets 50
In directory since2026-07-052026-07-05
operationalpartialdownno data

National Vulnerability Database vs PhishStats: common questions

Which is more reliable, National Vulnerability Database or PhishStats?

On our scheduled checks, National Vulnerability Database leads on measured uptime — National Vulnerability Database at 86.3% versus PhishStats at 5.9% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Which is faster, National Vulnerability Database or PhishStats?

PhishStats has the lower median latency in our checks — National Vulnerability Database responds in 974 ms versus PhishStats at 240 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do National Vulnerability Database and PhishStats need an API key?

Neither needs a paid key — National Vulnerability Database is callable with no signup, and PhishStats is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call National Vulnerability Database and PhishStats from the browser?

Neither sends browser-friendly CORS headers reliably, so call National Vulnerability Database and PhishStats from a server or proxy rather than client-side. The CORS and HTTPS rows above show exactly what we detected for each.

Are National Vulnerability Database and PhishStats free for commercial use?

National Vulnerability Database allows commercial use on its free tier, and PhishStats has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.