Tiresias Watch
tiresias.watch
Self-serve licence

Buy a Tiresias-Watch licence


Tiresias-Watch is threat intel delivery: a curated vulnerability and threat-intel corpus from openly licensed sources, normalised and deduplicated, with a feed of what changed. Today that means a normalised CISA KEV and NVD corpus you run yourself. What you buy here is the licence that lets you pull the image and turns on the delta feed. Everything else is already yours at the community tier, for nothing. Priced for the delivery, per install, never per seat.

Plans

Community

Everything except the delta feed. Not a trial and not a sample: every record from every cleared source, with the same attribution and the same constraints.

Free

no licence needed
  • Every record, every cleared source
  • Records, lookup and CVE correlation
  • The same per-record attribution
  • 25 records per page, with a resumable cursor
  • No delta feed

Pro

For synchronising. The delta feed is the one thing here you cannot get for nothing: keep a SIEM or a datastore in step without gaps.

$499

per month
  • Everything in Community
  • Delta feed, keyset-paged and resumable
  • 500 records per page
Annual is ten months. Two months free, the same terms as the rest of the Tiresias family. Prices are USD list; the price at checkout governs. MSSP terms, and any arrangement where you serve child tenants, are by agreement: write to sales@saluca.com.

What happens after you pay

StepHow it works
1. PayCard, monthly or annual. Stripe takes the payment; we never see the card.
2. LicenceMinted automatically and emailed to the address you pay with, in seconds. It is an Ed25519 JWT your install verifies offline, with no phone-home.
3. PullThe same licence is your registry credential. docker login registry.saluca.com with it, then pull and run.

If the email does not arrive, write to sales@saluca.com with the address you paid with. Nothing is lost: an undelivered licence is re-sent, it is not silently written off.

What the licence controls

CapabilityCommunityPro
Every record, every cleared sourceYesYes
Records, lookup, CVE correlationYesYes
Per-record licence and attributionYesYes
Delta feed-Yes
Records per page25500

The data itself is CISA KEV and the NVD, both public and openly licensed. You are paying for the curation, the integrity and the delivery: the normalisation, the clearance determination, the per-record attribution and a delta feed that cannot silently skip. Not for proprietary intelligence, which this product does not have: no collection of our own, no dark-web sourcing, no analyst reports and no telemetry.

An Enterprise tier is being built and is not on sale. It is offline delivery: the same records reaching a local or air-gapped install as signed, auto-updating bundles, with bulk export under the licence terms. None of it exists yet and it is not priced anywhere. If that is what you need, write to sales@saluca.com.

Page size is not a boundary. There is no rate limit anywhere in the read API and /v1/records carries a resumable keyset cursor at every tier, so a reader on the free tier obtains every record we hold, 25 at a time. That is why Starter and Enterprise were withdrawn on 2026-09-11: they sold a larger page and a larger page buys no record you could not already reach. There is one capability boundary in this product and it is the delta feed. No tier has ever had a bulk export route.