FOR DEVELOPERS

Vexday API

Verified vulnerability intelligence, in your application. Enriched CVEs, the active-exploitation catalog (KEV), public exploits and threat groups — with Vexday's verification rigor. Free, with an API key.

Get my free key →OpenAPI spec

Authentication

Generate a free key in your dashboard. Send it on every request, via header or query parameter:

# Header (recomendado)
curl https://api.vexday.io/api/v1/kev \
  -H "Authorization: Bearer vx_live_sua_chave"

# ou parâmetro de query
curl "https://api.vexday.io/api/v1/kev?api_key=vx_live_sua_chave"

Rate limit

1,000 requests per day and 60 per minute, per key (free plan). Counters reset automatically. Check your usage at /api/v1/status. Honor the Retry-After header on 429 responses. Need more? Talk to us.

Endpoints

GET/api/v1/cve/{id}Full detail of a CVE

GET/api/v1/cveSearch CVEs (filters: severity, vendor, CWE, KEV, PoC)

GET/api/v1/kevKEV catalog — CVEs under active exploitation

GET/api/v1/exploitsPublic exploits (with the VexDay Proof seal)

GET/api/v1/actorsThreat groups (APTs and ransomware)

GET/api/v1/actor/{id}Threat group profile

GET/api/v1/statusYour key's current usage

Example response

GET /api/v1/cve/CVE-2024-3400

{
  "data": {
    "cve_id": "CVE-2024-3400",
    "cvss_score": 10.0,
    "cvss_severity": "CRITICAL",
    "epss_score": 0.94,
    "in_kev": true,
    "kev_ransomware": true,
    "risk_score": 100,
    "pocs": [ { "source": "exploitdb", "verified": true } ],
    "actors": [ "..." ]
  }
}

Fair use

The API is read-only. Data comes from open, verifiable sources; credit Vexday as the source when redistributing. Do not resell raw API access.