2 Minute Warning by f1tym1

Terms of Service

Effective: June 2, 2026

These Terms of Service ("Terms") govern your use of the Two Minute Warning service operated by Two Minute Warning LLC, an Ohio limited liability company ("we", "us"). By creating an account, subscribing, or otherwise using the service, you agree to be bound by these Terms.

1. Agreement

These Terms form a binding agreement between you and Two Minute Warning LLC. If you are accepting these Terms on behalf of an organization, you represent that you have authority to do so, and "you" refers to that organization as well as the individual signing up.

2. The Service

Two Minute Warning provides a programmatic JSON REST API ("the Service") that exposes a deduplicated, structured threat-intelligence index covering CVEs, threat actors, malware families, MITRE ATT&CK techniques and mitigations, CWE weaknesses, and related entities. The Service aggregates and normalizes publicly-available data from sources including NVD, MITRE, and CISA.

Service features, response formats, rate limits, and pricing are described at /docs and /pricing. We may change features over time, generally additively. Material reductions in functionality or breaking API changes ship with at least 90 days' notice and a deprecation window (see API versioning in the docs).

3. Accounts & eligibility

You must be at least 16 years old to create an account. You must provide an accurate email address and keep it current. You are responsible for safeguarding your API key - anyone in possession of your key can use the Service on your subscription, against your rate limits, with charges to your billing account.

You may rotate or revoke your API key at any time from your dashboard. You agree to notify us promptly if you suspect unauthorized access.

4. Subscriptions, billing & cancellation

Plans & prices. Current plans, request caps, and prices are listed at /pricing. Free plans require no payment method. Paid plans are billed monthly in advance.

Auto-renewal. Paid subscriptions automatically renew at the end of each billing period unless cancelled. By subscribing, you authorize us (via Stripe) to charge your payment method for each renewal at the then-current price.

Taxes. Subscription prices are exclusive of taxes. Where applicable, sales tax, VAT, or GST will be added based on your billing address and computed automatically by Stripe Tax.

Cancellation. You may cancel your paid subscription at any time via the Stripe Customer Portal accessible from your dashboard. Cancellation takes effect at the end of your current billing period; you retain Service access through that date.

Refunds. Charges for partial months are not refundable. If you cancel mid-cycle, you remain billed for the current cycle and are not charged for the next.

Overage. On paid plans, requests beyond your tier's monthly cap are billed as overage at the rate published on /pricing (currently $0.01 per request past cap), added to your next invoice.

Price changes. We may change prices for new signups at any time. Existing subscribers will be notified at least 30 days in advance of price changes affecting them; you may cancel before the change takes effect to avoid the new price.

5. Acceptable use

You agree NOT to use the Service to:

  • Violate any law, regulation, or third-party right.
  • Resell, sublicense, or redistribute substantial portions of the Service's data to third parties as a competing product or feed. (Using the data internally within your own product, research, or workflows is permitted under Section 6.)
  • Attempt to bypass rate limits, authentication, or other technical controls - including by signing up multiple free-tier accounts for the same individual or organization.
  • Reverse engineer or attempt to extract our underlying database in bulk in a manner inconsistent with normal API use.
  • Use the Service to threaten, harm, harass, or facilitate the unlawful surveillance of any individual.
  • Probe, scan, or test the vulnerability of our infrastructure without prior written authorization.
  • Interfere with or disrupt the integrity or performance of the Service.

We may suspend or terminate accounts that violate these provisions.

6. API usage rights

Subject to these Terms and your active subscription, we grant you a worldwide, non-exclusive, non-transferable, revocable license to access the Service via your API key and to use the JSON responses for your internal operations, your products, your research, and your client work - including caching responses for performance.

Permissible uses include: SOC tooling, security research, threat-intel enrichment of your own data, alerting and detection pipelines, incident response workflows, academic study, and integration into security products you sell or deliver.

Excluded: distributing the data verbatim as a standalone feed, dataset download, or API directly competing with the Service. When in doubt, please ask first via [email protected].

Source attribution: where the underlying source data (NVD, MITRE, CISA, etc.) is governed by an upstream license requiring attribution, you should preserve that attribution if you republish derivative content.

7. Intellectual property

Two Minute Warning LLC retains all rights, title, and interest in the Service, the underlying software, the normalization logic, the API design, and any aggregated or derivative work product produced by the Service. The raw upstream sources (NVD, MITRE, CISA, etc.) remain under their respective licenses.

You retain all rights to your own data and to the outputs you produce using the Service.

8. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, NON-INFRINGEMENT, OR UNINTERRUPTED OPERATION.

We do not warrant that threat-intelligence data is complete, current, or free of errors. You should not rely solely on the Service for safety-critical, regulatory, or life-impacting decisions. The Service is a tool to support your judgment, not a substitute for it.

9. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW:

  • In no event will Two Minute Warning LLC, its officers, employees, or affiliates be liable for any indirect, incidental, consequential, special, punitive, or exemplary damages, including lost profits, lost data, business interruption, or goodwill, even if advised of the possibility.
  • Our aggregate liability for any claim arising out of or relating to these Terms or the Service is limited to the amount you paid us in the 12 months preceding the event giving rise to the claim, or US $100, whichever is greater.

Some jurisdictions do not allow these limitations; in those jurisdictions liability is limited to the maximum extent permitted by law.

10. Indemnification

You agree to indemnify, defend, and hold harmless Two Minute Warning LLC and its officers, employees, and affiliates from any claim, demand, liability, damages, or expense (including reasonable attorneys' fees) arising out of: (a) your use or misuse of the Service, (b) your violation of these Terms, or (c) your violation of any law or third-party right.

11. Termination

You may terminate your account at any time via the dashboard. Termination ends your right to use the Service, but does not entitle you to a refund of fees already paid.

We may suspend or terminate your account immediately for material breach of these Terms (including Section 5 violations) or for non-payment. Where reasonable, we will give you notice and an opportunity to cure first.

Sections that by their nature should survive termination (including 7, 8, 9, 10, 13) will survive.

12. Changes to these terms

We may update these Terms from time to time. If we make material changes, we will notify you by email at the address associated with your account at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.

You can always find the current version at this URL with the effective date noted at the top.

13. Governing law & disputes

These Terms are governed by the laws of the State of Ohio, USA, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to these Terms or the Service that the parties cannot resolve informally will be brought exclusively in the state or federal courts located in Ohio, USA, and you consent to personal jurisdiction in those courts.

Nothing in this section affects any non-waivable rights you may have under the laws of your country of residence.

14. Contact

For legal notices, including questions about these Terms, contact:

Two Minute Warning LLC
Legal notices: [email protected]
Privacy inquiries: [email protected]

For everything else, please use your dashboard.