Market validation

Cyber Vulnerability Change Feed

A proposed normalized API for teams that need lightweight CVE, KEV, severity, and product watchlist changes in automation-friendly JSON.

Request this feed View current demo Open paid API

GET /v1/cyber/vulnerabilities/changes?cpe=nginx&hasKev=true&since=2026-07-01

{
  "data": [
    {
      "cveId": "CVE-2026-0001",
      "severity": "critical",
      "knownExploited": true,
      "publishedAt": "2026-07-02",
      "matchedProducts": ["sample:nginx"]
    }
  ],
  "meta": { "sampleOnly": true, "market": "cyber-vulnerability" }
}

Validation Thesis

This concept is only built further if tracked requests, demo clicks, or marketplace intent justify the build.

KEV-first polling for security operations dashboards.
Product watchlists for vendors, MSPs, and internal tooling.
Developer-friendly alternative to broad threat-intel platforms.

Public Data Sources

The initial product would normalize public records into stable polling endpoints and exports.

NVD CVE API
CISA Known Exploited Vulnerabilities catalog

Buyer Workflows

These are the specific self-serve workflows this page is testing before any backend is built.

Known-exploited polling

Poll for newly added or modified known-exploited vulnerability records without maintaining a local parser.

Product watchlists

Monitor vendor and product names that matter to an MSP, SaaS operator, or internal security dashboard.

Severity change alerts

Detect when public CVE records change severity, references, or exploitation status.

Specific Workflow Tests

These pages test sharper buyer searches before implementation.

Workflow validation KEV and CVE Watchlist API Known-exploited vulnerability watchlists for automation

Monetization Hypothesis

Pricing only becomes meaningful after tracked demand appears. The first offer should stay narrow and low-touch.

Free sample tier for CVE and KEV response shape checks
Paid tier for watchlist polling and higher request volume
Premium tier only if product/version matching proves valuable

Validation FAQ

Would this replace a threat-intelligence platform?

No. The target product is a lightweight public-data change feed for automation, not a full threat-intelligence suite.

How would false positives be handled?

Responses would include source records and match basis so callers can verify product and version evidence.