Privacy Policy

Overview

CyberRota ("we", "us", "the site") operates cyberrota.com, a vulnerability intelligence platform that aggregates and enriches publicly available security data from the National Vulnerability Database (NVD), CISA's Known Exploited Vulnerabilities (KEV) catalog, and the Exploit Prediction Scoring System (EPSS). This policy explains what information we collect from visitors, how it is used, and the choices available to you.

Information We Collect

We do not require account registration and do not knowingly collect personal information such as your name or postal address. When you visit CyberRota, the following may be collected automatically:

• Usage data via Google Analytics: pages viewed, time on site, approximate location (derived from IP address), device and browser type, and referring site.
• Cookies and similar technologies, used for analytics and, where enabled, ad personalization.
• Server logs, including IP address and request details, retained for security and troubleshooting purposes.

Cookies & Advertising

This site uses cookies for analytics (Google Analytics) and may display advertising served by Google and its partners. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of third-party vendor use of cookies for personalized advertising by visiting www.aboutads.info/choices. A consent management banner is shown to eligible visitors so you can manage cookie preferences directly on this site.

Third-Party Services

We use the following third-party services, each governed by its own privacy policy:

• Google Analytics — traffic and usage measurement.
• Google AdSense — advertising.
• A consent management platform — used to collect and store your cookie/advertising preferences.

Data We Publish

The CVE records, severity scores, EPSS scores, and CISA KEV statuses shown on this site originate from public government and industry sources (NVD, CISA, FIRST.org) and are not personal data. Our public API and RSS feed re-publish this same information under the same terms.

Children's Privacy

CyberRota is a technical reference tool not directed at children, and we do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy can be directed to the CyberRota team through this website. See our About page for more information.