CVE hits the wire. Your team already knows.
CVEFeed monitors the software products you depend on and delivers real-time vulnerability alerts via email, Slack, or webhooks—enriched with EPSS, CVSS, KEV, and CWE context so your team can prioritize what actually matters.
Everything you need to stay
ahead of threats
From raw CVE data to actionable intelligence — one platform built for security teams.
Real-Time CVE Monitoring
Continuous ingestion from NVD, CISA KEV, and vendor advisories. New CVEs appear within minutes of publication.
Multi-Project Workspaces
Organize software stacks into projects. Invite team members, assign roles, and manage subscriptions per project.
Smart Alert Routing
Route alerts to email, Slack, Microsoft Teams, Jira, or webhook endpoints. Filter by severity, EPSS score, or exploit status.
EPSS Exploit Predictions
Exploit Prediction Scoring System data on every CVE. Prioritize patching by real-world exploitation probability.
Scoped API Tokens
Project-scoped API tokens with granular resource permissions. Integrate CVE data into your CI/CD, SIEM, or tooling.
CWE & CAPEC Intelligence
Deep-linked weakness and attack pattern databases. Understand the root cause and threat model behind every CVE.
Three steps to continuous
vulnerability awareness
Define Your Stack
Create a project and subscribe to the vendors and products your organization depends on.
Connect Your Channels
Wire up Slack, Microsoft Teams, Jira, webhook endpoints, or email. Choose severity levels and EPSS thresholds that trigger alerts.
Stay Ahead
Get notified the moment a new CVE affects your stack. Drill into CVSS, exploits, KEV status, and CWE context.
Build on CVEFeed
RESTful API with project-scoped tokens, resource-level permissions, and tier-based rate limits.
-
Scoped Bearer Tokens Fine-grained read/write/admin scopes per resource. Hashed storage with prefix-based lookup.
-
CVEQL Query Language Threat-hunting queries across the CVE corpus. Filter by CVSS, EPSS, vendor, CWE, and date ranges.
-
Webhook Delivery Logs Full delivery audit trail with retry logic and request/response payloads for debugging.
# Hunt weaponized vulns in your stack with CVEQL import requests # CVEQL: SQL-like query language for the entire CVE corpus query = """ cvss_score >= 9.0 and epss_scores.score >= 0.85 and products.vendor.name in ("apache", "microsoft") and is_cisa_kev = True and published >= "2026-01-01" """ response = requests.post( "https://api.cvefeed.io/api/cveql/search/", headers={"Authorization": "Bearer cvf_proj_..."}, json={"query": query, "page_size": 10}, ) for cve in response.json()["results"]: print( cve["id"], cve["severity"], cve["latest_epss"]["score"], cve["cisa_kev_detail"][0]["known_ransomware_campaign_use"], ) # CVE-2026-21985 CRITICAL 0.94 Known # CVE-2026-4412 CRITICAL 0.91 Unknown
Start free, scale as you grow
Every plan includes the full CVE database, EPSS data, and email alerts.
- 1 project
- 10 product subscriptions
- 1 team member
- Email alerts
- 30 API req/min
- 10 CVEQL req/min
- Webhook alerts
- Slack integration
- Microsoft Teams
- Advanced API
- RBAC
- Two-Factor Auth (MFA)
- Activity log
- 1-1 support
- 3 projects
- 20 product subscriptions
- 3 team members
- Email alerts
- 90 API req/min
- CVEQL
- Webhook alerts
- Slack integration
- Microsoft Teams
- Advanced API
- RBAC
- Two-Factor Auth (MFA)
- Activity log
- 1-1 support
- 5 projects
- 100 product subscriptions
- 5 team members
- Email + Webhook alerts
- 180 API req/min
- 30 CVEQL req/min
- Webhook alerts
- Advanced API
- RBAC
- Slack integration
- Microsoft Teams
- Two-Factor Auth (MFA)
- Activity log
- 1-1 support
- 10 projects
- 1,000 subscriptions
- 10 team members
- Email + Webhook alerts
- 720 API req/min
- 40 CVEQL req/min
- Webhook alerts
- Advanced API
- RBAC
- Slack integration
- Microsoft Teams
- Two-Factor Auth (MFA)
- Activity log
- 1-1 support
Fits into your existing workflow
Slack
Instant CVE alerts in any channel
Webhooks
Push events to your own endpoints
Splunk
CVEFeed app on Splunkbase
Microsoft Teams
Adaptive Card alerts in Teams channels
Jira
Create issues from CVE alerts automatically
RSS Feeds
Subscribe via any RSS reader
Chrome Extension
CVE lookup right from your browser
Stop chasing CVEs.
Let them come to you.
Join security teams who rely on CVEFeed for continuous vulnerability intelligence. Free forever, upgrade when ready.