Vexday API

Authentication

Generate a free key in your dashboard. Send it on every request, via header or query parameter:

# Header (recomendado)
curl https://api.vexday.io/api/v1/kev \
  -H "Authorization: Bearer vx_live_sua_chave"

# ou parâmetro de query
curl "https://api.vexday.io/api/v1/kev?api_key=vx_live_sua_chave"

Rate limit

1,000 requests per day and 60 per minute, per key (free plan). Counters reset automatically. Check your usage at /api/v1/status. Honor the Retry-After header on 429 responses. Need more? Talk to us.

Endpoints

Example response

GET /api/v1/cve/CVE-2024-3400

{
  "data": {
    "cve_id": "CVE-2024-3400",
    "cvss_score": 10.0,
    "cvss_severity": "CRITICAL",
    "epss_score": 0.94,
    "in_kev": true,
    "kev_ransomware": true,
    "risk_score": 100,
    "pocs": [ { "source": "exploitdb", "verified": true } ],
    "affected": [ { "vendor": "Palo Alto", "product": "PAN-OS" } ],
    "affected_versions": [
      {
        "vendor": "Palo Alto", "product": "PAN-OS",
        "version": "11.1", "less_than": "11.1.2-h3",
        "status": "affected", "version_type": "custom"
      }
    ],
    "actors": [ "..." ]
  }
}

Version applicability

The affected_versions field carries version ranges (lessThan exclusive, lessThanOrEqual inclusive) from the CNA container. It lets you decide whether a specific version is in scope — but the comparison is the consumer's: use a semantic comparator per version_type, don't compare as text. An empty range means the CNA published no bounds (don't assume 'not affected').