# Legal notice

DefenceLevel

Who operates DefenceLevel and how to contact us.

Last updated: 5 October 2026

## Service provider

The DefenceLevel service, the defencelevel.com website and the related domains (defencelevel.eu, defencelevel.it) are operated by:

| **Company name** | SCARAFILE Consulting S.R.L. |
| --- | --- |
| **Registered office** | Piața Victoriei 4, ap. 9C, 300006 Timișoara, Romania |
| **VAT number** | RO42858116 |
| **Trade register** | J35/2040/2020 (Oficiul Registrului Comerțului, Timiș) |
| **Contact** | info@defencelevel.com |
| **Privacy** | privacy@defencelevel.com |
| **Press** | press@defencelevel.com |
| **Security reports** | security@defencelevel.com (see [Security reports](https://defencelevel.com/security)) |

## The service

DefenceLevel is a cyber threat information service: a daily email briefing on vulnerabilities in commonly used software and devices, immediate alerts in the most serious cases and a public index of the threat level (DefenceLevel Index). The terms of use are in the [Terms of service](https://defencelevel.com/terms), and the processing of personal data on the [Privacy](https://defencelevel.com/privacy) page.

## Infrastructure

The website is hosted by Vercel Inc. (United States); the database is run by Supabase in a data centre in the European Union (Ireland); the service's emails are sent through Resend; the mailbox of the @defencelevel.com addresses is hosted by OVHcloud (France); payments are handled by Stripe. Details of the providers and the data they process are on the [Privacy](https://defencelevel.com/privacy) page.

## Intellectual property

The texts, the "defencelevel" brand, the symbol, the graphics and the software of the website belong to SCARAFILE Consulting S.R.L., unless stated otherwise. The typefaces used (Space Grotesk, Inter, IBM Plex Mono) are distributed under the SIL Open Font License.

DEFCON is the readiness scale of the United States armed forces: the DefenceLevel Index adopts its levels from 5 to 1. DefenceLevel is not affiliated with the United States Department of Defense or with the DEF CON® conference, a trademark of Def Con Communications, Inc.

The daily levels of the DefenceLevel Index are published under the **Creative Commons Attribution 4.0 (CC BY 4.0)** licence: they may be reused with attribution, as explained in the [methodology](https://defencelevel.com/index/methodology) page. The brand and the graphic kit are available in the [press kit](https://defencelevel.com/brand), together with the rules for their use.

The contents of the briefing reserved for subscribers are licensed for the subscriber's internal use and may not be republished without permission.

## Consumer disputes

If a problem cannot be solved by writing to us at info@defencelevel.com, consumers can turn to alternative dispute resolution (SAL) through the National Authority for Consumer Protection (ANPC), the consumer protection authority competent for the provider of the service.

[![ANPC · Soluționarea alternativă a litigiilor](https://defencelevel.com/legal/anpc-sal.png)](https://www.anpc.ro/sal)

## Third-party data

The service processes data published by third-party sources, including NIST's National Vulnerability Database (NVD) and CISA's Known Exploited Vulnerabilities catalogue, VulnCheck's VulnCheck KEV catalogue, used under its terms with attribution, and the ENISA EUVD European vulnerability database, reused under ENISA's legal notice with attribution. This product uses data from the NVD API but is not endorsed or certified by the NVD. The names of products and vendors mentioned belong to their respective owners and are used only to identify the vulnerabilities that concern them.

---

Web page: https://defencelevel.com/legal