VAPTCoordinated vulnerability disclosure platformResearcher recognition, vendor coordination, and CVE support
LoginRequest CVE
Legal terms

Terms and conditions.

These Terms govern access to and use of vapt.com, including the public advisory archive and the Request CVE reporting workflow.

1. Operator and scope

VAPT is the DBA and operating name used on vapt.com. It is operated through WebSec FZCO, with regional offices under WebSec B.V. and WebSec Technologies LLC. These Terms apply to the public website, its content, and interactive workflows unless a separate written agreement governs a specific service.

  • These Terms govern access to the public VAPT website, public advisories, the Request CVE workflow, and related online materials made available at vapt.com.
  • VAPT is the DBA and operating name used for vapt.com affairs. The VAPT DBA is held by the EU office, WebSec B.V., under EUIPO filing number 019283932.
  • VAPT is operated by WebSec FZCO (License Number: 67814), with regional offices under WebSec B.V. (EU) and WebSec Technologies LLC (US).
  • Separate statements of work, order forms, or service agreements govern paid services and prevail where they conflict with these website Terms.

2. Acceptable use

You may use the website only for legitimate informational, disclosure, and professional communication purposes.

  • You must not use the website in a manner that is unlawful, deceptive, abusive, disruptive, or technically harmful.
  • You must not submit false, fabricated, malicious, or intentionally misleading vulnerability reports.
  • You must not upload malware, credentials you are not entitled to disclose, personal data unnecessary for review, or material that infringes third-party rights.
  • You must not attempt to interfere with the availability, integrity, or security of the website, its forms, or its supporting infrastructure.

3. Request CVE submissions

The reporting workflow exists to support vulnerability coordination and CVE-related processing. It is not a public guarantee of action, acceptance, or publication.

  • A submission through the Request CVE workflow does not guarantee triage, reservation, publication, credit, compensation, or any specific outcome.
  • By submitting material, you represent that you may lawfully provide it and that, to the best of your knowledge, the information is accurate and relevant.
  • You retain ownership of original material you submit, but you grant VAPT and its operating legal entities (WebSec FZCO, WebSec B.V., and WebSec Technologies LLC) a non-exclusive right to store, review, analyze, adapt, and use the material as reasonably necessary to assess, coordinate, document, publish, or defend a disclosure or CVE-related record.
  • VAPT may redact, summarize, normalize, or decline submitted material where required for safety, legality, confidentiality, editorial quality, or operational policy.

4. Public content and advisory materials

Advisories and legal materials on this site are intended to support technical coordination and public understanding. They do not replace product-specific operational judgment.

  • Public advisories, CVE JSON records, references, and related materials are provided for general informational and coordination purposes.
  • Although VAPT seeks technical accuracy, public materials may evolve and may be corrected, updated, retracted, or supplemented over time.
  • Nothing on this website constitutes legal advice, regulatory advice, a warranty of remediation outcome, or a guarantee that every affected environment is covered by a public record.

5. Intellectual property and external links

Unless otherwise stated, the website design, branding, compilations, and original text prepared by VAPT remain protected by applicable intellectual property law. Third-party names, product names, trademarks, and references remain the property of their respective owners.

External links are provided for reference and coordination convenience. VAPT and its operating entities are not responsible for the content, security, or availability of third-party websites.

6. Liability, changes, and governing law

VAPT may update these Terms from time to time to reflect operational, legal, or security changes. The version published on this page is the current version for website use.

  • To the maximum extent permitted by applicable law, the website and its public content are provided on an as-is and as-available basis.
  • VAPT does not warrant uninterrupted availability, completeness of third-party references, or that every published statement will remain current without later revision.
  • Nothing in these Terms excludes liability that cannot lawfully be excluded under applicable law.

These Terms are governed by the laws applicable in the United Arab Emirates, unless mandatory law requires otherwise.