Skip to content
Patcharo

Legal information

Legal notice

Who publishes Patcharo, who hosts it, how to reach us and on what terms the data of the vulnerability sources is reused.

Document being finalised: some information and commitments are still to be confirmed. It does not apply yet in this form.

Version of 23 Oct 2026

On this page
  1. 1. Publisher
  2. 2. Hosting
  3. 3. Contacts and points of contact
  4. 4. Intellectual property
  5. 5. Data sources and licences
  6. 6. Other legal information

1. Publisher

The site patcharo.com and the application app.patcharo.com ("Patcharo") are published by the following individual entrepreneur (the "Publisher"):

  • Publisher: Ahmed BECHIR EI (individual entrepreneur), trading as DELQUOR.
  • Status: individual entrepreneur registered with the French Trade and Companies Register, 992 562 728 R.C.S. Vienne (SIREN 992 562 728).
  • Establishment address: 36 Rue Antonio Meucci, 38090 Villefontaine, France.
  • E-mail: contact@patcharo.com.
  • Publication director: Ahmed BECHIR.
  • Patcharo is the name of the service; DELQUOR is the trade name under which the Publisher operates. Neither designates a separate company.

2. Hosting

  • Hosting and delivery of the site and the application: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, United States; telephone: +1 650 319 8930.
  • Hosting of the database and authentication: Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, on Amazon Web Services infrastructure, Paris region (France). This provider publishes no telephone number; it can be reached through its site supabase.com.

The other providers that process data to run the Service are presented on the Sub-processors page.

3. Contacts and points of contact

Content you consider illegal can be reported to the general contact address, following the procedure described in the terms of use.

4. Intellectual property

Patcharo's software, interface, texts, structure and selection of content, and the Patcharo and DELQUOR names and logos, belong to the Publisher or are used with their owners' permission. Any reproduction or substantial extraction without permission is prohibited, subject to the exceptions provided by law; the terms for using the content are set out in the terms of use.

The names and logos of the software and hardware vendors mentioned belong to their owners; mentioning them identifies the products concerned and implies neither partnership nor endorsement. The Geist and Geist Mono fonts are used under the SIL Open Font License 1.1.

5. Data sources and licences

Patcharo reuses public information from the following sources, stating their origin on each record, in compliance with their terms:

  • NVD (National Vulnerability Database, NIST): public domain data. This product uses the NVD API but is not endorsed or certified by the NVD.
  • CVE Program: CVE® records are reproduced under the CVE Program terms of use. Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. The licence is reproduced below.
  • CISA KEV catalog: distributed under the Creative Commons Zero 1.0 licence; reusing it implies no endorsement by CISA.
  • FIRST: EPSS scores are produced by FIRST (EPSS by FIRST.org). CVSS is owned by FIRST and used by permission.
  • CERT-FR (ANSSI): advisories, alerts and indicators are reused under the Licence Ouverte / Open Licence version 2.0; each document cited states its source and date, and reusing it implies no endorsement by ANSSI.
  • Vendors (Check Point, Cisco, Fortinet, Palo Alto Networks…): Patcharo repeats the facts published in their advisories (identifiers, affected and fixed versions, whether a fix or a workaround exists, reported exploitation), summarises them in its own words and links to the original advisory, which prevails; it neither reproduces nor translates their text. The text of the CVE records these vendors publish as CVE Numbering Authorities (CNA) is reused under the CVE Program terms.

CVE Program licence, reproduced as its terms of use require: "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."

The texts of CVE records, of the KEV catalog and of CERT-FR documents are machine-translated between French and English by an artificial intelligence system (Mistral AI), without human review of each translation, then verified by automatic checks that require, among other things, identical identifiers, versions and links; the methodology describes this process. Translations are marked as such, are not attributed to the sources, and the original text prevails.

6. Other legal information