Pricing

$3.00 / 1,000 vulnerability records

Vulnerability & Threat Intel Feed

Live vulnerability intelligence from the official public sources (NIST NVD CVE, CISA KEV, GitHub Security Advisories), merged by CVE into one enriched record and billed only per record delivered. Incremental: a run with nothing new bills nothing.

Pricing

$3.00 / 1,000 vulnerability records

Rating

0.0

(0)

Developer

Pono Data

Actor stats

Bookmarked

Total users

Monthly active users

3 hours ago

Last modified

Categories

Developer tools

Record id

Required

CVE id when present, otherwise the GHSA id.

Type:string

Example:CVE-2026-12345

Primary source

source

Required

nvd, cisa-kev, or ghsa.

Type:string

Example:nvd

All sources

sources

Optional

Every feed this record was seen in (records merge across feeds by CVE).

Type:array

Example:

[
  "cisa-kev",
  "nvd"
]

CVE id

cveId

Optional

Type:string | null

Example:CVE-2026-12345

GHSA id

ghsaId

Optional

Type:string | null

Example:GHSA-aaaa-bbbb-cccc

Title

title

Optional

Type:string

Example:Heap overflow in libexample

Description

description

Optional

Type:string

Example:A specially crafted input triggers a heap overflow...

Severity

severity

Required

critical, high, medium, low, none, or unknown.

Type:string

Example:critical

CVSS base score

cvssScore

Optional

Type:number | null

Example:9.8

CVSS vector

cvssVector

Optional

Type:string | null

Example:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known exploited

knownExploited

Required

Listed in the CISA Known Exploited Vulnerabilities catalog.

Type:boolean

Example:true

Used in ransomware

ransomwareUse

Optional

CISA flag: known use in ransomware campaigns.

Type:boolean | null

Example:false

Vendor / product

vendorProduct

Optional

Type:string | null

Example:Acme Corp Widget Server

Published

published

Optional

Type:string | null

Example:2026-06-10T00:00:00Z

Last modified

lastModified

Optional

Type:string | null

Example:2026-06-12T00:00:00Z

References

references

Optional

Type:array

Example:

[
  "https://example.com/advisory"
]

Source URL

sourceUrl

Required

Canonical page for this record. Every row is traceable to its source.

Type:string

Example:https://nvd.nist.gov/vuln/detail/CVE-2026-12345

Retrieved at

retrievedAt

Required

UTC timestamp when this record was fetched.

Type:string

Example:2026-06-13T08:36:10Z

Confidence

confidence

Required

Provenance confidence. 1.0 means every field appears verbatim in the official source at sourceUrl; nothing is inferred.

Type:number

Example:1

Vulnerability & Security Intel Aggregator

parseforge/vulnerability-security-intel-scraper

Pull live security intel from GitHub Advisories, MITRE ATT&CK, Exploit DB, OpenSSF Scorecard and URLhaus in one feed. Get CVE IDs, severity, affected packages, threat techniques and active malware URLs. Built for SecOps, threat intel and DevSecOps.

ParseForge

EPSS Exploit Prediction Scoring System Scraper

parseforge/epss-exploit-prediction-scraper

Scrape EPSS (Exploit Prediction Scoring System) scores from FIRST.org. Returns the 30-day probability and percentile rank of CVE exploitation. Filter by CVE ID(s), date, history window, or minimum score.

ParseForge

FIRST.org CSIRT Teams + EPSS Scraper

parseforge/first-org-csirt-teams-scraper

Extract the FIRST.org global directory of Computer Security Incident Response Teams (CSIRTs): team name, country, region, host organization, constituency, members, established date, and contact channels. Export to JSON, CSV, or Excel for cybersecurity research, threat intelligence.

ParseForge

CVE Vulnerability Lookup (NIST NVD)

automation-lab/cve-vulnerability-lookup

Query the NIST NVD for CVE details — lookup by CVE ID, keyword, or CPE product. Returns CVSS scores, descriptions, CWE IDs, affected software, and patch links. No API key required.

Stas Persiianenko

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

Cve Vulnerability Monitor

cyber-intel-tools/cve-vulnerability-monitor

One-line: "Monitor NVD, CISA KEV for critical CVEs by keyword and severity"

cyber-intel-tools

Exploit-DB Exploits Scraper

parseforge/exploit-db-exploits-scraper

Hunt down live security records from Exploit Db Exploits with identifiers, severity, affected products, descriptions and references. Trusted by SOC teams, threat intel researchers and DevSecOps pipelines. Run on demand or on a recurring schedule and feed every row into your favourite analytics or.

ParseForge

NIST NVD CVE Scraper

parseforge/nist-nvd-cve-scraper

Scrape CVE vulnerabilities from the NIST National Vulnerability Database (NVD) API 2.0. Filter by severity, CWE, keyword, date range, or single CVE ID. Returns CVSS v3/v2 scores, CWE weaknesses, CPE configurations, and references.

ParseForge

Feodo Tracker C2 Scraper

parseforge/feodo-tracker-c2-scraper

Tap the abuse.ch Feodo Tracker blocklist for live botnet command and control servers tied to Emotet, QakBot, and Dridex. Each row carries IP address, port, online status, ASN, country, and malware family. Built for firewall blocklisting, SOC alert enrichment, and threat hunting.

ParseForge

CIRCL CVE Search Scraper

parseforge/circl-cve-scraper

Scrape CVE vulnerability records from CIRCL CVE Search. Fetch the latest CVEs, look up by ID, browse vendor products, or list every CVE for a vendor/product. Returns CVSS, CWE, CPEs, references, CAPEC, and impact metrics.

ParseForge