Skip to content

Defend Network API

No authHTTPSCORSSecurity
Open documentation ↗

Overview

Free no-auth JSON feed of exploited CVEs with CVSS, EPSS and CISA KEV status

Defend Network is a security API. It needs no API key. It is served over HTTPS and allows browser requests (CORS).

At a glance

Authentication
No auth
HTTPS
Yes
CORS
Yes
Category
Security

Questions

Does the Defend Network API need an API key?

No. The Defend Network API can be called without an API key or sign-up, which makes it handy for prototypes and front-end demos.

Can I call the Defend Network API from the browser?

Yes. The Defend Network API sends CORS headers, so a web page can call it directly with fetch().

Does the Defend Network API support HTTPS?

Yes, the Defend Network API is served over HTTPS.

What are alternatives to the Defend Network API?

Other Security APIs include Microsoft Security Response Center (MSRC), National Vulnerability Database, Cisco PSIRT openVuln API, Shodan, BitWarden.

Compare alternatives →

Microsoft Security Response Center (MSRC)

Security

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No auth

National Vulnerability Database

Security

U.S. National Vulnerability Database

No auth

Cisco PSIRT openVuln API

Security

The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apiconsole.cisco.com and register an application to recieve a client_id and a client_secret You can then get your token using curl or any other method you prefer. 'curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<your_client_id>" -d "client_secret=<your_client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2' You will receive an access token as demonstrated in the following example: '{"access_token":"I7omWtBDAieSiUX3shOxNJfuy4J6","token_type":"Bearer","expires_in":3599}' In Swagger, click on Change Authentication enter the text "I7omWtBDAieSiUX3shOxNJfuy4J6" (which is the token you received) then click on "Try this operation"

OAuth19 endpoints

Shodan

Security

Search engine for Internet connected devices

API key

BitWarden

Security

Best open-source password manager

OAuth

HaveIBeenPwned

Security

Passwords which have previously been exposed in data breaches

API key

Listed from public-apis database (MIT).