Version 2026-09-27

TRIX Community terms

The terms for a free TRIX Community account and API key from CVEasy AI. TRIX Pro adds a commercial license; upgrade from your account page or contact us.

1. Who these terms bind

These terms are an agreement between you and Blueteamautomation LLC, doing business as CVEasy AI ("we"). If you sign up on behalf of an organization, you confirm you may bind it, and "you" includes it. Creating an account, creating a key, or calling the API means you accept these terms.

2. What you may do

You may use the API and its data for:

  • personal use, research, teaching, and journalism;
  • protecting systems your own organization owns or operates, including in internal tools, dashboards, tickets, and reports your organization uses;
  • evaluating whether to buy a commercial key.

You may quote individual results in articles, talks, and reports, with the attribution in section 5.

3. What needs a commercial key

  • Building the data into a product, feed, or service offered to anyone outside your organization, paid or free.
  • Using it to deliver services to clients, including managed security, MSSP, consulting, and assessment work.
  • Reselling, sublicensing, or redistributing the data in bulk, or publishing a copy of the catalog.
  • Training or fine-tuning a machine learning model that is offered to others.

4. Fair use of the key

One key per account and one account per person, confirmed by email. Keep your key secret; you are responsible for calls made with it. The free limits are 60 API calls a minute and 1,000 a day, and 300 lookups a day on cveasyai.com. Stay within them and do not work around them, for example by spreading calls across several accounts or reusing the browser session outside the site. Do not probe, scan, or load test the API.

5. Attribution

Where you show TRIX data to others, credit it as "per CVEasy AI threat intel data" with a link to cveasyai.com/threat-intel/. Some fields come from third parties who ask for attribution: EPSS scores from FIRST (first.org/epss), and actor names from MITRE ATT&CK and the MISP galaxy. CVE records come from NVD and exploited status from CISA KEV.

6. What we keep

We keep your email address, the organization and use case you give us, and per day call counts for your key and your use of the site. When you accept these terms, create a key, rotate it, or revoke it, we record the time, the terms version, and the IP address and browser the request came from, in a log that cannot be edited after the fact. That record is how either of us can show later what was agreed. We store your key only as a one way hash and never see it again after we issue it. We do not log the content of your requests beyond the route called. We use this to run the service, prevent abuse, and contact you about your account or these terms. Your account also joins the TRIX mailing list for new intel and product news; every email has an unsubscribe link, and unsubscribing does not affect your key. See our privacy policy. To close your account, revoke your key on the account page and email us to delete the record.

7. No warranty

The API and its data are provided as is, without warranty of any kind. Scores, bands, and actor attributions are an input to your own judgment, not a substitute for it. Data may be incomplete, delayed, or wrong. To the fullest extent the law allows, we are not liable for any loss arising from your use of the API or the data, and our total liability under these terms is zero dollars, since the key is free.

8. Changes, suspension, and ending

We may change the API, its limits, or these terms. When the terms change materially, we publish a new version here and you accept it before your next new key. We may suspend or revoke a key that breaks these terms or puts the service at risk. You may stop using the API and revoke your key at any time.

9. Law

These terms are governed by the laws of the State of Wisconsin, and disputes go to the state or federal courts in Milwaukee County, Wisconsin.