What is free, and what needs an account?
Anyday Security launched ExploitTotal on November 11 as a free lookup service for assessments of publicly disclosed software vulnerabilities. Its public catalogue is accessible without sign-in; the company says assessments record how far an open-weight AI model got against a particular vulnerability.
The access levels differ. Public pages show verdicts and outcomes. Sign-in adds model details, while proof-of-concept downloads require a verified account. This report read the public catalogue and access documentation; it did not complete account verification or download or run exploit code.
Verification and a weekly allowance
The FAQ asks prospective download users for a work email, company, role, country and LinkedIn profile, followed by human review. It lists five proof-of-concept downloads per week for verified accounts; downloading an already obtained item again does not count again.
The terms restrict use to defensive research and testing of systems the user owns or is explicitly authorized in writing to test. Redistribution is prohibited, and account approval can be refused or withdrawn. Free public lookup therefore does not mean unrestricted or automatically approved downloads.
Read the assessment, not just its label
The methodology says the catalogue covers vulnerabilities that are already patched and publicly disclosed. A reproducible crash can count as AI exploitable, so that label does not necessarily mean the model achieved full control of a system. A result reporting no working exploit yet is not evidence that a vulnerability is safe.
Results describe the company’s model, attempt and observation time. They do not independently confirm exposure or protection in a reader’s environment. The terms also make no guarantee that downloaded proof-of-concept code is safe to execute. The separate Anyday protection product is not included in the free lookup offer.
