Market catalog

Cyber Vulnerability Change Feed

A proposed normalized API for teams that need lightweight CVE, KEV, severity, and product watchlist changes in automation-friendly JSON.

Request this feed View current demo Open paid API

GET /v1/cyber/vulnerabilities/changes?cpe=nginx&hasKev=true&since=2026-07-01

{
  "data": [
    {
      "cveId": "CVE-2026-0001",
      "severity": "critical",
      "knownExploited": true,
      "publishedAt": "2026-07-02",
      "matchedProducts": ["sample:nginx"]
    }
  ],
  "meta": { "sampleOnly": true, "market": "cyber-vulnerability" }
}

Buyer Fit

This catalog entry summarizes the buyer fit, sources, and access model for this data product.

KEV-first polling for security operations dashboards.
Product watchlists for vendors, MSPs, and internal tooling.
Developer-friendly alternative to broad threat-intel platforms.

Public Data Sources

The initial product would normalize public records into stable polling endpoints and exports.

NVD CVE API
CISA Known Exploited Vulnerabilities catalog

Buyer Workflows

These are the specific self-serve workflows this page is designed to support.

Known-exploited polling

Poll for newly added or modified known-exploited vulnerability records without maintaining a local parser.

Product watchlists

Monitor vendor and product names that matter to an MSP, SaaS operator, or internal security dashboard.

Severity change alerts

Detect when public CVE records change severity, references, or exploitation status.

Specific Workflow Tests

These pages focus on specific buyer workflows.

Workflow page CVE API Public CVE change feed for security automation Workflow page KEV and CVE Watchlist API Known-exploited vulnerability watchlists for automation

Access Model

Pricing starts with narrow, low-touch access paths for qualified buyers.

Review the source coverage, sample response, and likely workflow fit.
Request access when the workflow matches a buyer use case.
Production availability depends on source scope, refresh cadence, and compliance boundaries.

Product FAQ

Would this replace a threat-intelligence platform?

No. The target product is a lightweight public-data change feed for automation, not a full threat-intelligence suite.

How would false positives be handled?

Responses would include source records and match basis so callers can verify product and version evidence.