API documentation

Track vulnerabilities

Pull externally visible vulnerabilities by priority.

How it works

Known vulnerabilities on the internet-facing side of your monitored and verified domains are listed: CVEs on exposed services, CVEs matched from software versions and end-of-life versions. Actively exploited ones (CISA KEV) come first. No active scanning is performed.

List actively exploited ones

curl -G "https://api.darkradar.com/api/public/v1/vulnerabilities" \
  -H "x-api-key: $DARKRADAR_API_KEY" \
  --data-urlencode "durum=open" \
  --data-urlencode "kev=true" \
  --data-urlencode "sirala=oncelik"

Was this page helpful?