Terms of use

Last updated 16 September 2026.

Who provides CySec

CySec is provided by GRCSAC (“we”, “us”). Contact: [email protected].

The subscription

These are the terms Apple requires you to see before you buy, and they are the same terms shown on the paywall inside the app.

Prices are in US dollars; Apple sets the equivalent price in other currencies. One subscription unlocks the whole app on both iPhone and Apple Watch.

• Payment is charged to your Apple Account when you confirm the purchase.
• It renews automatically unless you cancel at least 24 hours before the end of the current period. Your Apple Account is charged for the renewal within 24 hours of the period ending.
• Cancel any time on your iPhone: Settings → your name → Subscriptions → CySec → Cancel Subscription. Cancelling stops the next renewal; the subscription runs to the end of the period you have paid for.
• If you cancel during the free trial before it ends, you are not charged.
• Refunds are handled by Apple under Apple's policies, not by us. Request one at reportaproblem.apple.com.
• Managing your subscription, including cancelling, is done through Apple rather than through us, because Apple takes the payment.

The two documents that govern this purchase are these terms and our privacy policy.

What CySec is, and what it is not

CySec reports on security problems that have already been disclosed publicly, and tells you which of them appear to affect the products you have told it you run.

It is not:

• a guarantee that you are safe, or that you have been told about everything that affects you;
• a prevention or protection tool — it does not block, patch, remove or defend against anything;
• professional security advice, legal advice, or a compliance or audit product.

Acting on what CySec shows you is your decision and your responsibility, or that of the people who look after your systems.

The sources can be wrong or late

CySec reads public sources — CISA's Known Exploited Vulnerabilities list, the National Vulnerability Database, the CVE programme, GitHub's advisory database, Microsoft's Security Update Guide, vendor advisories and security news. Those sources are maintained by other people. They are sometimes incomplete, sometimes wrong, and sometimes published well after a problem is already being exploited.

We pass on what they say, link to the original so you can check it, and say so on the item when we know a source is disputed, withdrawn or delayed. We cannot make a source accurate, and matching against your environment is a best effort based on what you have entered.

Acceptable use

• Use CySec for your own awareness, or that of the organisation you work for.
• Do not resell, redistribute or republish the data CySec provides as a feed, a product or a service of your own.
• Do not attempt to overload, probe, reverse-engineer or circumvent the service, its rate limits or its device attestation.
• Do not use CySec to plan or assist an attack on systems you are not responsible for.

We may suspend access that breaks these rules or threatens the service for everyone else.

Availability

We work to keep CySec running and current, but we do not promise uninterrupted service. Sources go down, networks fail, and Apple's push service is outside our control. Alerts may be delayed or missed; do not rely on CySec as your only means of learning about a security problem.

Limitation of liability

To the fullest extent permitted by law, CySec is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, data, business or goodwill, arising from your use of, or inability to use, CySec — including any security incident you were not alerted to, were alerted to late, or were alerted to inaccurately.

Where liability cannot be excluded, our total liability to you is limited to the amount you paid for CySec in the twelve months before the event giving rise to the claim.

Nothing in these terms limits any liability that cannot lawfully be limited, and some jurisdictions do not allow certain exclusions, so parts of this section may not apply to you.

Changes

We may update these terms. When we do, we will change the date at the top and note material changes in the app. Continuing to use CySec after a change means you accept the updated terms. If you do not, cancel your subscription through Apple.

Governing law

These terms are governed by the laws of the State of New Jersey, United States, without regard to its conflict-of-law rules.

Contact

[email protected]