National Vulnerability Database vs URLScan.io

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d91.7%92.8%
Uptime · 30d93.3%91.7%
P50 · ms2631123
P95 · ms44484908
AuthnoneapiKey
CORSyesno
HTTPSyesyes
Card requirednono
Commercial useyesunclear
Data licensePublic domain (U.S. Government work)Unverified
Free tierFree — no key required (free key raises limits)Free tier — key may be required
Rate limit5 requests per rolling 30 seconds without an API key (50 with a free key)30 req/window · 29 remaining
In directory since2026-07-052026-07-05
operationalpartialdownno data

National Vulnerability Database vs URLScan.io: common questions

Which is more reliable, National Vulnerability Database or URLScan.io?

On our scheduled checks, URLScan.io leads on measured uptime — National Vulnerability Database at 91.7% versus URLScan.io at 92.8% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Which is faster, National Vulnerability Database or URLScan.io?

National Vulnerability Database has the lower median latency in our checks — National Vulnerability Database responds in 263 ms versus URLScan.io at 1123 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do National Vulnerability Database and URLScan.io need an API key?

National Vulnerability Database needs no key, while URLScan.io requires a free API key. If you want to start calling without signup, reach for National Vulnerability Database first.

Can I call National Vulnerability Database and URLScan.io from the browser?

Only National Vulnerability Database is browser-friendly — it returns CORS headers over HTTPS. URLScan.io needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are National Vulnerability Database and URLScan.io free for commercial use?

National Vulnerability Database allows commercial use on its free tier, and URLScan.io has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.