Terms of Service

Last updated: June 7, 2026 - Governing law: State of Georgia, USA

1. Acceptance

By accessing or using BreachSpider you accept these terms in full. If you do not accept, do not use the platform. Use of the platform constitutes binding acceptance of these terms and any updates posted with 30 days notice.

2. Description of Service

BreachSpider is a cybersecurity intelligence platform providing CVE data, asset-based vulnerability matching, AI-assisted analysis via SAGE, compliance reporting tools, and alert notifications. BreachSpider is an INFORMATION SERVICE ONLY.

CRITICAL: BreachSpider is an intelligence tool, not a security guarantee. Read Section 3 before using the platform to make security decisions.

3. Critical Disclaimer -- Intelligence Tool, Not Security Guarantee

BreachSpider does NOT:

Scan your network or systems
Guarantee detection of all vulnerabilities affecting your environment
Provide managed security services
Replace a qualified cybersecurity professional
Guarantee the accuracy, completeness, or timeliness of CVE data
Guarantee that SAGE analysis is free from error
Guarantee that alerts are delivered within any specific time window

BreachSpider IS:

A data aggregation and intelligence platform
A tool to assist security decision-making, not replace it
Dependent on third-party data sources (NVD, CISA, vendors) that may contain errors, omissions, or delays

YOU ARE SOLELY RESPONSIBLE for all security decisions made using BreachSpider data. Remediation decisions, risk acceptance decisions, and all actions taken in response to BreachSpider findings are your sole responsibility.

4. Liability Limitation -- Critical

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

CITED RELEVANCE LLC'S TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING FROM OR RELATED TO BREACHSPIDER SHALL NOT EXCEED THE GREATER OF: (A) FEES PAID BY YOU IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100.00). CITED RELEVANCE LLC SHALL NOT BE LIABLE FOR ANY: - INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES - LOST PROFITS OR REVENUE - DATA LOSS OR CORRUPTION - SECURITY BREACHES OR INCIDENTS OCCURRING AT YOUR FACILITIES - REGULATORY FINES OR PENALTIES - MISSED VULNERABILITIES OR DELAYED ALERTS - ERRORS IN CVE DATA, CVSS SCORES, EPSS SCORES, OR SAGE ANALYSIS - DECISIONS MADE BASED ON BREACHSPIDER OUTPUT - FAILURE TO DETECT, PREVENT, OR RESPOND TO ANY CYBERATTACK THIS LIMITATION APPLIES EVEN IF CITED RELEVANCE LLC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF ANY REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

5. Data You Provide

Asset data, network information, and other data you enter into BreachSpider is used solely to provide the service to you. We do not sell your data. We do not share your data with third parties except as required to provide the service (see Privacy Policy). You retain all rights to your data.

6. CVE Data Sources and Accuracy

CVE data is sourced from the National Vulnerability Database (NVD), CISA advisories, vendor PSIRTs, and Zero Day Initiative (ZDI). These sources may contain errors, omissions, or delays. CITED Relevance LLC enriches this data but does not independently verify every CVE entry. You should verify critical findings against primary sources before taking remediation action.

7. SAGE AI Disclaimer

SAGE (Sovereign AI Governance Engine) provides AI-assisted analysis. SAGE outputs are:

Generated by machine learning and may contain errors
Not legal advice, not professional security advice
Not a substitute for qualified security professional judgment
Provided for informational purposes only

CITED Relevance LLC is not liable for any decisions made based on SAGE output.

8. Intellectual Property

BreachSpider, SAGE, BCS scoring methodology, and BSID system are proprietary to CITED Relevance LLC. USPTO Provisional Patent Application 64/015,948. CVE data sourced from NVD is public domain. BreachSpider enrichment, scoring, and analysis of that data is proprietary.

9. Acceptable Use

You may not:

Use BreachSpider to facilitate unauthorized access to any system
Resell or redistribute CVE data obtained from BreachSpider
Reverse engineer the platform, SAGE, or BCS scoring
Share credentials with unauthorized users
Use the API beyond your tier's rate limits

See the full Acceptable Use Policy for complete terms.

10. Subscription and Billing

Subscriptions are managed via Stripe. You authorize recurring charges. No refunds for partial periods. Cancel anytime -- access continues until period end. Service credits for downtime are governed by the Service Level Agreement.

11. Governing Law and Disputes

These terms are governed by the laws of the State of Georgia, USA, without regard to conflict of law principles. Disputes shall be resolved by binding arbitration under AAA rules, venue in Jackson County, Georgia. Class action waiver: you may not bring claims as a class member.

12. Modifications

We may modify these terms with 30 days email notice. Continued use after the effective date constitutes acceptance.

13. Contact

CITED Relevance LLC
Jefferson, Georgia
[email protected]