General Conditions

1. Who operates the site

ZeroDay Findings is operated by PT. DEVINCI GROUP INDONESIA. In these conditions, “we”, “us”, and “the operator” mean that company. Contact contact@zerodayfindings.com.

2. What the service is

The site publishes vulnerability metadata and links drawn from public catalogs, including the NVD API, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS, and vendor or community feeds. Exploit code and proof-of-concept payloads are not stored. The site also offers technology hubs, security-update views, a press scan, member accounts, newsletters, and Jobs Corner.

This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS scores are published by FIRST. A record can be incomplete, delayed, or withdrawn by its source. The pages are information for people who already operate the products named on them. They are not a penetration-test report, a patch order, or legal advice.

3. Acceptance

Using the site means you accept these conditions and the privacy notice. If you use the site for an organization, you confirm that you may accept them for that organization. If you do not accept them, do not use the site.

4. Accounts and membership

A free account can watch a limited set of technologies and receive the weekly note described on the pricing page. Paid packages, and the API or webhook allowances that come with them, are the ones listed on pricing at the time you register. You are responsible for the accuracy of the name and email on the account, and for keeping the sign-in secret.

We may suspend an account that breaks these conditions, that we cannot attribute to a real person or organization, or that puts the catalog or other members at risk. You may stop using an account at any time and ask us to close it.

5. Acceptable use

You may use the public pages and, where your package includes them, the account tools and API. You may not:

• use the catalog, the API, or a member’s contact details to break into a system, or to distribute exploit code;
• scrape or resell the site in a way that degrades it for other readers, or present our pages as your own catalog;
• post unlawful, deceptive, or abusive material, including in a Jobs Corner offer or enquiry;
• attempt to read another member’s account, session, or API key.

6. Jobs Corner

Offers on Jobs Corner are written by registered members. PT. DEVINCI GROUP INDONESIA does not employ those members, does not set their rates, and does not take part in the engagement that follows an enquiry. A published offer shows the member’s name, the date, the description, the skills and rate saved on the profile, and a website when the member supplied one.

Ping this offer sends an email to the member who posted the offer. That email names the signed-in person who sent it, includes their email address, and includes any note they wrote. You may send one enquiry about the same offer per day. Do not use Ping this offer to advertise, harass, or contact someone about anything other than that offer.

7. Intellectual property

The site design, the ZeroDay Findings name, and the text we write are owned by the operator or used under license. Vulnerability identifiers, scores, and advisory links remain subject to the terms of the organizations that publish them. A short quotation with a link to the page is fine. Copying the catalog in bulk requires our written permission, except where a package already includes API access and you stay inside that allowance.

8. Availability and changes

We aim to keep the site available, and we may change, suspend, or remove a page, feed, or package. Prices and package limits on the pricing page apply to new registrations. We may update these conditions by posting a new version on this page. The date at the top is the date of the version in force. Continued use after that date means you accept the updated conditions.

9. Liability

The catalog is provided as published. We do not warrant that a record is complete, current, or sufficient to decide a patch. To the extent the law allows, PT. DEVINCI GROUP INDONESIA is not liable for loss of data, loss of profit, or a security incident that follows from relying on a page, a score, a missing record, or a member’s Jobs Corner offer. Nothing in these conditions limits liability that applicable law does not allow us to limit.

10. Law and contact

These conditions are governed by the laws of the Republic of Indonesia. Write to contact@zerodayfindings.com about these conditions. The privacy notice is at Privacy.