Connectors
Sources
Live connectors read public feeds. Keyed connectors wait for an API token. Closed connectors stay off when the upstream feed is gated or has no bulk API.
| Source | Access | Last run | Records | Note |
|---|---|---|---|---|
| CVE.org Official CVE identification and record system | Free | ok Oct 14, 2026 | 2,154 | Linked 2154 official CVE.org records and refreshed 12 recent CVE 5.0 documents. |
| NIST NVD US National Vulnerability Database, CVSS, CWE, CPE | Free + API | ok Oct 14, 2026 | 1,941 | NVD records: 1741 known-exploited matches plus the newest published window (2978 in range). This product uses data from the NVD API but is not endorsed or certified by the NVD. |
| CISA KEV Catalog of vulnerabilities known to have been exploited | Free | ok Oct 14, 2026 | 1,741 | Imported the CISA Known Exploited Vulnerabilities catalog (1741 listed). |
| OSV.dev Open-source vulnerability database covering software packages | Free + API | ok Oct 14, 2026 | 96 | OSV package records from 12 ecosystems. 39 also carry a GitHub advisory id. 0 lookups failed. |
| GitHub Advisory Database Open-source package vulnerabilities and security advisories | Free + API | ok Oct 14, 2026 | 38 | GitHub Advisory Database ids were indexed from the OSV mirror. Set GITHUB_TOKEN to call the official API. |
| GitLab Advisory Database Dependency vulnerabilities across multiple ecosystems | Free | skipped Oct 14, 2026 | 0 | GitLab Advisory Database does not publish a keyless bulk feed. Open advisories.gitlab.com from the source list; this connector does not scrape it. |
| Vulners Aggregated CVEs, security bulletins, and patches | Freemium | skipped Oct 14, 2026 | 0 | Set VULNERS_API_KEY to search Vulners. The public API is freemium. |
| VulDB Vulnerability intelligence, classifications, and timelines | Freemium | skipped Oct 14, 2026 | 0 | Set VULDB_API_KEY to pull VulDB. The feed is freemium. |
| OpenCVE CVE monitoring, filtering, subscriptions, and alerts | Freemium | skipped Oct 14, 2026 | 0 | Set OPENCVE_USERNAME and OPENCVE_PASSWORD. OpenCVE's API is freemium. |
| CIRCL Vulnerability Lookup Aggregated vulnerability intelligence and API | Free | ok Oct 14, 2026 | 17 | Latest records from the CIRCL Vulnerability-Lookup API. |
| Exploit Database Public exploit archive references, linked out and not mirrored | Free | ok Oct 14, 2026 | 704 | Correlated 802 Exploit-DB archive entries to known CVEs. Stored up to 3 outbound links per CVE and none of the exploit files. |
| Rapid7 Vulnerability Database Vulnerability and exploit intelligence | Free | skipped Oct 14, 2026 | 0 | Rapid7's vulnerability database has no keyless bulk API. Public Metasploit module links are tracked on their own source. |
| Packet Storm Security Security advisories, disclosures, and research | Free | skipped Oct 14, 2026 | 0 | Packet Storm's feed sits behind a bot check. This connector does not bypass it. |
| Zero Day Initiative Coordinated vulnerability disclosures and advisories | Free | ok Oct 14, 2026 | 200 | Published Zero Day Initiative advisories from the public RSS feed. |
| VulnCheck Exploitation intelligence and vulnerability prioritization | Freemium | skipped Oct 14, 2026 | 0 | Set VULNCHECK_API_KEY to pull VulnCheck enrichment. The API is freemium. |
| FIRST EPSS Probability of exploitation within the next 30 days | Free | ok Oct 14, 2026 | 1,924 | Applied FIRST EPSS scores to 1924 findings already in the catalog. |
| AttackerKB Community assessments of vulnerability exploitability | Free | skipped Oct 14, 2026 | 0 | Set ATTACKERKB_API_KEY to read AttackerKB topic scores. |
| Metasploit Modules Public module references correlated to CVE records | Free | ok Oct 14, 2026 | 620 | Correlated 639 public Metasploit module references to known CVEs. Stored up to 3 links per CVE. |
| Tenable CVE Database CVE intelligence, detection plugins, and remediation | Free | skipped Oct 14, 2026 | 0 | Tenable's public CVE pages are not a bulk API. This connector does not scrape plugin pages. |
| Snyk Vulnerability Database Vulnerabilities in open-source libraries and dependencies | Free | skipped Oct 14, 2026 | 0 | Snyk's vulnerability database does not offer an open bulk feed. This connector does not scrape security.snyk.io. |
| Odoo Security Odoo and OpenERP product vulnerabilities and vendor issue links | Free | ok Oct 14, 2026 | 53 | Odoo and OpenERP product CVEs from the NVD CPE match. |