DefenceLevel
Legal notice
Who operates DefenceLevel and how to contact us.
Service provider
The DefenceLevel service, the defencelevel.com website and the related domains (defencelevel.eu, defencelevel.it) are operated by:
| Company name | SCARAFILE Consulting S.R.L. |
| Registered office | Piața Victoriei 4, ap. 9C, 300006 Timișoara, Romania |
| VAT number | RO42858116 |
| Trade register | J35/2040/2020 (Oficiul Registrului Comerțului, Timiș) |
| Contact | info@defencelevel.com |
| Privacy | privacy@defencelevel.com |
| Press | press@defencelevel.com |
| Security reports | security@defencelevel.com (see Security reports) |
The service
DefenceLevel is a cyber threat information service: a daily email briefing on vulnerabilities in commonly used software and devices, immediate alerts in the most serious cases and a public index of the threat level (DefenceLevel Index). The terms of use are in the Terms of service, and the processing of personal data on the Privacy page.
Infrastructure
The website is hosted by Vercel Inc. (United States); the database is run by Supabase in a data centre in the European Union (Ireland); the service's emails are sent through Resend; the mailbox of the @defencelevel.com addresses is hosted by OVHcloud (France); payments are handled by Stripe. Details of the providers and the data they process are on the Privacy page.
Intellectual property
The texts, the "defencelevel" brand, the symbol, the graphics and the software of the website belong to SCARAFILE Consulting S.R.L., unless stated otherwise. The typefaces used (Space Grotesk, Inter, IBM Plex Mono) are distributed under the SIL Open Font License.
DEFCON is the readiness scale of the United States armed forces: the DefenceLevel Index adopts its levels from 5 to 1. DefenceLevel is not affiliated with the United States Department of Defense or with the DEF CON® conference, a trademark of Def Con Communications, Inc.
The daily levels of the DefenceLevel Index are published under the Creative Commons Attribution 4.0 (CC BY 4.0) licence: they may be reused with attribution, as explained in the methodology page. The brand and the graphic kit are available in the press kit, together with the rules for their use.
The contents of the briefing reserved for subscribers are licensed for the subscriber's internal use and may not be republished without permission.
Consumer disputes
If a problem cannot be solved by writing to us at info@defencelevel.com, consumers can turn to alternative dispute resolution (SAL) through the National Authority for Consumer Protection (ANPC), the consumer protection authority competent for the provider of the service.
Third-party data
The service processes data published by third-party sources, including NIST's National Vulnerability Database (NVD) and CISA's Known Exploited Vulnerabilities catalogue, VulnCheck's VulnCheck KEV catalogue, used under its terms with attribution, and the ENISA EUVD European vulnerability database, reused under ENISA's legal notice with attribution. This product uses data from the NVD API but is not endorsed or certified by the NVD. The names of products and vendors mentioned belong to their respective owners and are used only to identify the vulnerabilities that concern them.