CVE Monitor — KEV, EPSS, Risk & PoC

Search and enrich CVEs across global and regional feeds in one dataset. Filter by keyword, severity, CVSS, EPSS, CISA KEV, and public PoC signals. Get a composite risk score for faster triage — built for SOC, AppSec, and researchers.

No API key required. Run the Actor, set filters, download results.

What you get

Each dataset row is one enriched CVE, including:

• CVE ID, title, severity, CVSS
• EPSS exploit probability
• CISA KEV flag (is_kev)
• Public PoC / exploit signal (has_poc)
• Composite risk score (0–100)
• Published / modified timestamps and source signals

Feeds covered include NVD, CNVD, EUVD, CISA KEV, EPSS, plus PoC evidence (e.g. GitHub / Packet Storm where available).

Modes

Mode	Use it for
search	Filtered CVE list → one dataset row per CVE
lookup	Single CVE by ID (e.g. CVE-2021-44228)
stats	High-level corpus statistics

Example input (search)

{
  "mode": "search",
  "q": "openssl",
  "minCvss": 7,
  "isKev": false,
  "hasPoc": true,
  "sortBy": "risk_score",
  "sortOrder": "desc",
  "limit": 20
}

Pricing (pay per event)

Platform usage is included in event pricing.

Event	When	Price
Actor start	Once per run	$0.005
CVE result	Each CVE written to the dataset	$0.02
Stats result	mode=stats payload	$0.01

Examples:

• 20 CVEs ≈ $0.405 (start + 20 × $0.02)
• 100 CVEs ≈ $2.005
• 1,000 CVEs ≈ $20.005

Tip: set limit deliberately — you only pay for rows returned.

Tips

• Sort by risk_score or epss_score for triage-first lists
• Combine isKev + hasPoc + minCvss to cut noise
• Use publishedSince (ISO date) for monitoring windows
• Cap with limit (1–250) and paginate with offset if needed

Output

Results land in the default dataset (table / JSON / CSV / Excel export, or via Apify API / MCP).