API

Why this page exists

A noticeable share of our traffic is automated collection. We would rather hand the data over properly than watch it be taken one page at a time: scraping is slow for you, expensive for us, and gives you a worse copy than the one we can send.

What it will give you

• The whole index, programmatically One record per exploit — identifier, title, source type, publication and modification dates, CVE list, CVSS, and the source document as we store it.
• An incremental feed Once you are caught up you ask for what changed, rather than pulling the whole index again. That is the part scraping cannot give you at any speed.
• The same data the site shows The fields match what the public pages are built from, so what you see here is what you get — no second-class copy for machines.

Status

In development. There is no pricing yet and no sign-up form — we are still working out what the access should look like.

If you need this, tell us what you are building and how often you need the data. That is what shapes it, and early requests carry the most weight.

Until then

Requests are limited per address, and past a threshold a browser check stands between you and the pages. It is solvable on purpose: the point is to make bulk collection cost something, not to stop you outright. It also gets more expensive the wider you sweep.