Skip to content

Security APIs

72 security APIs for vulnerabilities, breaches and security scanning, best documented first.

Microsoft Security Response Center (MSRC)

Security

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No auth

National Vulnerability Database

Security

U.S. National Vulnerability Database

No auth

Cisco PSIRT openVuln API

Security

The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apiconsole.cisco.com and register an application to recieve a client_id and a client_secret You can then get your token using curl or any other method you prefer. 'curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<your_client_id>" -d "client_secret=<your_client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2' You will receive an access token as demonstrated in the following example: '{"access_token":"I7omWtBDAieSiUX3shOxNJfuy4J6","token_type":"Bearer","expires_in":3599}' In Swagger, click on Change Authentication enter the text "I7omWtBDAieSiUX3shOxNJfuy4J6" (which is the token you received) then click on "Try this operation"

OAuth19 endpoints

Shodan

Security

Search engine for Internet connected devices

API key

BitWarden

Security

Best open-source password manager

OAuth

HaveIBeenPwned

Security

Passwords which have previously been exposed in data breaches

API key

1Password Connect

Security

REST API interface for 1Password Connect.

Bearer token15 endpoints

Hybrid Analysis

Security

File and URL malware analysis powered by Falcon Sandbox

API key

HackerOne

Security

The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting

API key

Events API

Security

1Password Events API Specification.

Bearer token3 endpoints

Bugcrowd

Security

Bugcrowd API for interacting and tracking the reported issues programmatically

API key

LoginRadius

Security

Managed User Authentication Service

API keyCORS

GreyNoise

Security

Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data

API key

Privacy.com

Security

Generate merchant-specific and one-time use credit card numbers that link back to your bank

API key

hashlookup CIRCL API

Security

![](https://www.circl.lu/assets/images/circl-logo.png) [CIRCL hash lookup](https://hashlookup.circl.lu/) is a public API to lookup hash values against known database of files. For more details about all the datasets included [visit the website of the project](https://www.circl.lu/services/hashlookup/). The API is accessible via HTTP ReST API and the API is also [described as an OpenAPI](https://hashlookup.circl.lu/swagger.json). A [documentation is available with](https://www.circl.lu/services/hashlookup/) with sample queries and software using hashlookup. An offline version as Bloom filter is also [available](https://circl.lu/services/hashlookup/#how-to-quickly-check-a-set-of-files-in-a-local-directory). The API can be tested live in the interface below.

No auth11 endpoints

Censys

Security

Search engine for Internet connected host and devices

API key

SecurityTrails

Security

Domain and IP related information such as current and historical WHOIS and DNS records

API key

FraudLabs Pro

Security

Screen order information using AI to detect frauds

API key

FOFA

Security

Search engine for Internet connected assets and devices

API key

Pulsedive

Security

Scan, search and collect threat intelligence data in real-time

API key

VulDB

Security

VulDB API allows to initiate queries for one or more items along with transactional bots

API key

Escape

Security

An API for escaping different kind of queries

No auth

FilterLists

Security

Lists of filters for adblockers and firewalls

No auth

Mozilla http scanner

Security

Mozilla observatory http scanner

No auth

More categories