Pricing

from $20.00 / 1,000 prioritized advisories

Infrastructure Security Advisory Normalizer

Normalize CERT-Bund and Microsoft MSRC security advisories into one consistent schema. Match findings to your infrastructure stack, enrich them with CISA KEV and EPSS data, and prioritize them using a transparent, deterministic risk score.

Pricing

from $20.00 / 1,000 prioritized advisories

Rating

0.0

(0)

Developer

Fabian Hankel

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

Developer tools

Automation

You can access the Infrastructure Security Advisory Normalizer programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

{
  "openapi": "3.0.1",
  "info": {
    "version": "0.1",
    "x-build-id": "795Mf0Kqh29HJgMKC"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/hankel_labs~infrastructure-advisory-normalizer/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-hankel_labs-infrastructure-advisory-normalizer",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/hankel_labs~infrastructure-advisory-normalizer/runs": {
      "post": {
        "operationId": "runs-sync-hankel_labs-infrastructure-advisory-normalizer",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/hankel_labs~infrastructure-advisory-normalizer/run-sync": {
      "post": {
        "operationId": "run-sync-hankel_labs-infrastructure-advisory-normalizer",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "required": [
          "stack"
        ],
        "properties": {
          "stack": {
            "title": "Infrastructure stack (required)",
            "minItems": 1,
            "type": "array",
            "description": "At least one entry. Each entry: vendor (required, non-empty), product (optional), versions (optional list of strings). Omit versions for simple mode - matching then happens on product level and is clearly flagged.",
            "items": {
              "type": "object",
              "required": [
                "vendor"
              ],
              "properties": {
                "vendor": {
                  "title": "Vendor",
                  "type": "string",
                  "minLength": 1,
                  "description": "Vendor name, e.g. microsoft or fortinet (required, non-empty)."
                },
                "product": {
                  "title": "Product",
                  "type": "string",
                  "description": "Optional product name, e.g. Exchange Server 2019. Omit for vendor-level matching."
                },
                "versions": {
                  "title": "Versions",
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "description": "Optional list of version strings. Omit for product-level matching."
                }
              }
            }
          },
          "sources": {
            "title": "Sources",
            "minItems": 1,
            "uniqueItems": true,
            "type": "array",
            "description": "Advisory sources to scan.",
            "items": {
              "type": "string",
              "enum": [
                "cert-bund",
                "msrc"
              ]
            },
            "default": [
              "cert-bund",
              "msrc"
            ]
          },
          "days_back": {
            "title": "Days back",
            "minimum": 1,
            "maximum": 90,
            "type": "integer",
            "description": "Look-back window in days (1-90).",
            "default": 14
          },
          "min_severity": {
            "title": "Minimum severity",
            "enum": [
              "low",
              "medium",
              "high",
              "critical"
            ],
            "type": "string",
            "description": "Advisories below this normalized severity are dropped.",
            "default": "medium"
          },
          "only_known_exploited": {
            "title": "Only known exploited",
            "type": "boolean",
            "description": "Keep only advisories in CISA KEV or flagged 'Exploited: Yes' by the vendor.",
            "default": false
          },
          "status": {
            "title": "Advisory status",
            "enum": [
              "new",
              "updated",
              "both"
            ],
            "type": "string",
            "description": "Return new advisories, updated ones, or both.",
            "default": "both"
          },
          "max_results": {
            "title": "Max results",
            "minimum": 1,
            "maximum": 500,
            "type": "integer",
            "description": "Hard cap on emitted (and charged) advisories.",
            "default": 100
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}

Security Advisory Normalizer for IT Stacks OpenAPI definition

OpenAPI is a standard for designing and describing RESTful APIs, allowing developers to define API structure, endpoints, and data formats in a machine-readable way. It simplifies API development, integration, and documentation.

OpenAPI is effective when used with AI agents and GPTs by standardizing how these systems interact with various APIs, for reliable integrations and efficient communication.

By defining machine-readable API specifications, OpenAPI allows AI models like GPTs to understand and use varied data sources, improving accuracy. This accelerates development, reduces errors, and provides context-aware responses, making OpenAPI a core component for AI applications.

You can download the OpenAPI definitions for Infrastructure Security Advisory Normalizer from the options below:

OpenAPI.json

If you’d like to learn more about how OpenAPI powers GPTs, read our blog post.

You can also check out our other API clients:

Infrastructure Security Advisory Normalizer API in Python

Infrastructure Security Advisory Normalizer API in JavaScript

Infrastructure Security Advisory Normalizer API through CLI

Infrastructure Security Advisory Normalizer API

Open Source Security Advisory Monitor

viniman27/open-source-security-advisory-monitor

Track exploited vulnerabilities and open-source security advisories from public CISA data.

Vinicius Assumpção de Araujo

🛡️ CISA KEV + EPSS Vulnerability Intelligence Tracker

nexgendata/cisa-kev-vulnerability-intelligence

NexGenData

CISA ICS Advisory Monitor

technicaldost/cisa-ics-advisory-monitor

Track industrial control system advisories from CISA for security and compliance teams.

Technical Dost Solutions

GitHub Security Advisory Monitor

technicaldost/github-security-advisory-monitor

Track reviewed GitHub Security Advisories by ecosystem and severity.

Technical Dost Solutions

GitHub Security Advisories Scraper

maximedupre/github-security-advisories-scraper

GitHub Security Advisories Scraper for GHSA feeds, CVE lookup, package lookup, severity filters, CVSS, EPSS, CWE, fixed versions, references, credits, and advisory timestamps.

Maxime Dupré

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

Security Advisory Vendor Risk Monitor

seeb/security-advisory-vendor-risk-monitor

Monitor security advisories for vendor-risk signals such as CVE, affected product, severity, vulnerable versions, fix version, and mitigation.

Techionik

Cyber Exposure Intelligence (NVD + CISA KEV + FIRST EPSS)

atlas-data/cyber-exposure-intelligence

Joins the official NVD CVE API 2.0, the CISA Known Exploited Vulnerabilities catalog and FIRST EPSS into one deduplicated, risk-prioritized vulnerability record with incremental change tracking and durable cross-run state.

Atlas

CSAF Advisory Extractor

datamule/csaf-advisory-extractor

Point at ANY OASIS CSAF 2.0 / VEX provider or aggregator (Red Hat, Siemens, BSI/CERT-Bund, Cisco...) and pull structured security advisories. Handles both ROLIE feeds and directory distributions; flattens each doc to advisory x vulnerability x product with CVSS and remediation.