Pricing

Pay per usage

Cyber Exposure Intelligence (NVD + CISA KEV + FIRST EPSS)

Joins the official NVD CVE API 2.0, the CISA Known Exploited Vulnerabilities catalog and FIRST EPSS into one deduplicated, risk-prioritized vulnerability record with incremental change tracking and durable cross-run state.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Atlas Assistent

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Categories

Developer tools

Business

Run mode

mode

Optional

incremental: only CVEs new/changed since the last run (or the lookback window on first run). full: a broad backfill over the lookback window (never advances the cursor).

Type:string

Default:incremental

Options:

incrementalfull

Incremental cursor field

cursorField

Optional

Which immutable NVD date the incremental keyset cursor orders by. lastModified surfaces re-analysed CVEs (recommended); published tracks only newly disclosed CVEs.

Type:string

Default:lastModified

Options:

lastModifiedpublished

Maximum items

maxItems

Optional

Upper bound on the number of records saved to the dataset (after filtering, enrichment and deduplication).

Type:integer

Minimum:1

Maximum:50000

Default:200

Lookback window (days)

lookbackDays

Optional

First-run incremental window and full-mode backfill window. NVD limits a single query to a 120-day span, so longer windows are fetched as multiple sub-windows.

Type:integer

Minimum:1

Maximum:3650

Default:30

Recheck window (days)

recheckWindowDays

Optional

Incremental overlap: re-fetch and re-compare already-committed CVEs whose cursor date is within this many days below the cursor, so upstream NVD edits are surfaced as changed records. The cursor is never regressed by these re-checks. Set 0 to disable.

Type:integer

Minimum:0

Maximum:365

Default:2

Max NVD pages per run

maxNvdPages

Optional

Hard ceiling on NVD API pages fetched in one run (cost/runtime guard). When hit, the cursor is held below the uncaptured region and the remainder is picked up next run.

Type:integer

Minimum:1

Maximum:2000

Default:25

NVD API key (optional)

nvdApiKey

Optional

Optional NVD API key. Raises the NVD rate limit (~50 vs ~5 requests / 30 s) and is sent only as a request header — never logged. Leave empty to run unauthenticated.

Type:string

CVE IDs

cveIds

Optional

Explicit CVE ID allow-list, e.g. CVE-2021-44228. When set, NVD is queried per-ID and only these CVEs are returned.

Type:array

Keyword

keyword

Optional

Free-text keyword. Pushed to NVD server-side (keywordSearch) and re-checked against description / CPE client-side.

Type:string

Vendor filter

vendor

Optional

Case-insensitive substring match against vendors parsed from CPE / KEV.

Type:string

Product filter

product

Optional

Case-insensitive substring match against products parsed from CPE / KEV.

Type:string

CPE filter

cpe

Optional

Case-insensitive substring match against CPE 2.3 match criteria, e.g. cpe:2.3:a:apache:log4j.

Type:string

Minimum CVSS base score

cvssMin

Optional

Keep only CVEs whose best-available CVSS base score is at least this value (0-10, decimals allowed, e.g. 7.5 or 9.8). CVEs with no CVSS score are excluded.

Type:string

KEV only

kevOnly

Optional

Keep only CVEs on the CISA Known Exploited Vulnerabilities catalog. If the KEV fetch fails while this is on, the run emits nothing and holds the cursor rather than misclassifying records.

Type:boolean

Default:false

Minimum EPSS probability

epssMin

Optional

Keep only CVEs whose EPSS exploit-probability is at least this value (0-1, e.g. 0.5). Requires the EPSS enrichment.

Type:string

Minimum EPSS percentile

epssPercentileMin

Optional

Keep only CVEs whose EPSS percentile is at least this value (0-1, e.g. 0.95). Requires the EPSS enrichment.

Type:string

Published from (inclusive)

publishedFrom

Optional

ISO date, e.g. 2024-01-01. Keeps only CVEs published on/after this date. Invalid calendar dates are rejected.

Type:string

Published to (inclusive)

publishedTo

Optional

ISO date, e.g. 2024-12-31. Keeps only CVEs published on/before this date.

Type:string

Modified from (inclusive)

modifiedFrom

Optional

ISO date. Keeps only CVEs last modified on/after this date.

Type:string

Modified to (inclusive)

modifiedTo

Optional

ISO date. Keeps only CVEs last modified on/before this date.

Type:string

Incremental since (override)

since

Optional

Optional ISO date/timestamp overriding the automatic incremental cursor for this run.

Type:string

Include raw source fields

includeRaw

Optional

Include a compact raw object of selected upstream values for auditing. Disable for leaner output.

Type:boolean

Default:true

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

🛡️ CISA KEV + EPSS Vulnerability Intelligence Tracker

nexgendata/cisa-kev-vulnerability-intelligence

NexGenData

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge

CISA KEV Scraper - Exploited Vulnerability Data

benthepythondev/cisa-kev-scraper

Scrape CISA Known Exploited Vulnerabilities catalog: CVEs, vendors, products, due dates and remediation notes.

Ben

EPSS Vulnerability Prioritization Monitor

orbiscribe/epss-vulnerability-prioritization-monitor

Score CVE watchlists with FIRST EPSS exploit probability, detect rising risk, and optionally enrich matches with NVD details.

Orbiscribe Labs

CISA Known Exploited Vulnerabilities Search

ryanclinton/cisa-kev-search

Search and filter the official CISA Known Exploited Vulnerabilities (KEV) catalog -- the authoritative U.S. government list of vulnerabilities actively exploited in the wild.

Ryan Clinton

CVE Feed: NVD, CISA KEV, GitHub Advisories Merged

thoob/threat-intel-feed

A CVE feed that merges NIST NVD, CISA KEV, and GitHub Advisories into one deduplicated record per CVE, with the source URL on every row. Official public data only, copied without inference, billed only per delivered record. An unchanged incremental run bills nothing.

Pono Data

NVD CVE Vulnerability Search

ryanclinton/nvd-cve-vulnerability-search

NVD CVE Vulnerability Search queries the NIST National Vulnerability Database (NVD) REST API v2.0 to retrieve detailed information about Common Vulnerabilities and Exposures (CVEs). The NVD is the U.S.

Ryan Clinton

CISA KEV Scraper - CVE Threat Intelligence Feed

compute-edge/cisa-kev-scraper

Extract CISA Known Exploited Vulnerabilities (KEV) catalog data. Filter by vendor, product, date range, and ransomware flag. Includes computed remediation due-date fields.

Compute Edge

CISA KEV Monitor — Known Exploited Vulnerabilities Feed

mukedlii/cisa-kev-monitor

Monitor the CISA Known Exploited Vulnerabilities (KEV) catalog for new actively exploited CVEs. Filter by vendor, product, or ransomware flag. Get instant Telegram alerts when critical vulnerabilities are added.