What it does: The same advisories, in real time, pulled from POST /security/vulndb with the licence key and the site domain, merged as a watermarked delta rather than a full snapshot. How to access: GuardForge > Vulnerabilities. Free/PRO: Pro (vuln_db). It supersedes the free feed entirely while it is active. Notes:

• Pro rows carry the advisory summary; the record counter on the screen counts only source = 'pro' rows, so a site that used to be on free does not read its stale free rows as coverage of the licensed feed.
• patched_in is not a field the endpoint sends. Both tiers derive the fixed version from the affected range through the shared GUARDFORGE_Vuln_Range, and only an exclusive upper bound (<2.1.4) names one; a sent field still wins over a derived one.