You can access the CISA KEV Scraper - Exploited Vulnerability Data programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "query": "microsoft",
12    "ecosystem": "PyPI",
13    "maxResults": 10
14};
15
16// Run the Actor and wait for it to finish
17const run = await client.actor("benthepythondev/cisa-kev-scraper").call(input);
18
19// Fetch and print Actor results from the run's dataset (if any)
20console.log('Results from dataset');
21console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
22const { items } = await client.dataset(run.defaultDatasetId).listItems();
23items.forEach((item) => {
24    console.dir(item);
25});
26
27// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

CISA KEV Scraper - Exploited Vulnerability Data API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use CISA KEV Scraper - Exploited Vulnerability Data API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

CISA KEV Scraper - Exploited Vulnerability Data API in Python

CISA KEV Scraper - Exploited Vulnerability Data API through CLI

CISA KEV Scraper - Exploited Vulnerability Data OpenAPI definition

CISA KEV Scraper - Exploited Vulnerability Data API

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge

CISA KEV Monitor — Known Exploited Vulnerabilities Feed

mukedlii/cisa-kev-monitor

Monitor the CISA Known Exploited Vulnerabilities (KEV) catalog for new actively exploited CVEs. Filter by vendor, product, or ransomware flag. Get instant Telegram alerts when critical vulnerabilities are added.

Genoff Márk

CISA Known Exploited Vulnerabilities Search

ryanclinton/cisa-kev-search

Search and filter the official CISA Known Exploited Vulnerabilities (KEV) catalog -- the authoritative U.S. government list of vulnerabilities actively exploited in the wild.

Ryan Clinton

CISA KEV Scraper - CVE Threat Intelligence Feed

compute-edge/cisa-kev-scraper

Extract CISA Known Exploited Vulnerabilities (KEV) catalog data. Filter by vendor, product, date range, and ransomware flag. Includes computed remediation due-date fields.

Compute Edge

CISA KEV Vendor Leads Scraper

gocreative.ai/cisa-kev-vendor-leads

Aggregates vendors and products from the CISA Known Exploited Vulnerabilities (KEV) catalog. Returns company name, product, CVE count, and date ranges. Perfect for cybersecurity consultancies, pen-testing firms, and patch-management vendors building outbound lead lists.

GoCreative AI

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

Cve Vulnerability Monitor

cyber-intel-tools/cve-vulnerability-monitor

One-line: "Monitor NVD, CISA KEV for critical CVEs by keyword and severity"

cyber-intel-tools

OSS Dependency Risk Report — Bus Factor, CVEs & SBOM Compliance

ryanclinton/oss-dependency-risk-report

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

Ryan Clinton

DepGuard - Dependency Vulnerability Scanner

george.the.developer/depguard-dependency-vulnerability-scanner

Scan your dependencies for known vulnerabilities over OSV.dev and flag the ones CISA lists as actively exploited, so you patch the dangerous bugs first. Packages or a lockfile in, normalized vulnerability rows out. No API key, standby ready.