Legal notice

Publisher

The website krakenshield.eu (KrakenShield) is published by KRAKEN HOLDING, French simplified joint-stock company (SAS) with a share capital of €368,000.

• Registered office: 450 avenue de Saint-Philippe, 06410 Biot, France
• SIREN: 980 458 467
• SIRET (head office): 980 458 467 00019
• Trade register (RCS): 980 458 467 R.C.S. Antibes
• EU VAT number: FR84980458467
• Email: contact@krakenshield.eu

Publication director

The President of KRAKEN HOLDING

Hosting

The website is hosted in the European Union by IONOS SARL (SARL au capital de 100 000 €, RCS Sarreguemines B 431 303 775).

• Address: 7, place de la Gare, BP 70109, 57200 Sarreguemines Cedex, France
• Phone: 0970 808 911
• Website: https://www.ionos.fr

European sovereignty

Our providers are European operators. Your audit results, the analysed code and your conversations with our assistants are hosted and processed in the European Union: they do not leave the EU.

Online payment of Kredits is handled by Stripe: your card details are entered on its secure payment page and are never passed on to us.

• IONOS · Website and data hostingData centres in the European Union
• Mistral AI · Artificial intelligence of the assistantsParis, France · servers in the EU
• Brevo · Email deliveryParis, France · servers in the EU
• Stripe · Online payment of KreditsStripe Payments Europe, Dublin, Ireland

Artificial intelligence

The virtual assistants Belinda and Nestor are AI-generated characters: their answers are written by an artificial intelligence model from Mistral AI (Paris), hosted in the European Union. Answers marked “Done, the Boss has sent the answer” are written by a member of our team.

Being generated automatically, these answers may contain errors and do not constitute legal advice or a contractual commitment. How messages are processed is described in our privacy policy.

Intellectual property

All content on this website (text, visuals, logo, KrakenShield brand) is the property of KRAKEN HOLDING, unless stated otherwise. Any reproduction, representation or adaptation, in whole or in part, without prior written consent is prohibited.

Data sources

Code analysis, continuous monitoring and CVE Watch rely on public databases, used in accordance with their licences. KrakenShield copies OSV, EPSS, the KEV catalog and the cdnjs library fingerprints every night; the NVD is queried on demand.

• OSV (Open Source Vulnerabilities, Google), which aggregates the GitHub Advisory Database, PyPA, RustSec and the Go Vulnerability Database among others: CC BY 4.0 licence.
• EPSS (Exploit Prediction Scoring System) by FIRST: exploitation probability of CVEs, used with attribution.
• The CISA KEV catalog (US Cybersecurity and Infrastructure Security Agency): vulnerabilities known to be exploited, public domain (CC0).
• NIST NVD (National Vulnerability Database) and MITRE CWE: CVE records and weaknesses in CVE Watch. This product uses data from the NVD API but is not endorsed or certified by the NVD.
• cdnjs (Cloudflare): SHA-512 (SRI) fingerprints of the published files of each version of JavaScript and CSS libraries, to recognise an embedded copy from its fingerprint alone.
• DB-IP "IP to Country Lite": country of visits in audience measurement, CC BY 4.0 licence.

Personal data

How we process your data is described in our privacy policy.