Vulnerability Management
Business capabilities this tag reaches
Cybersecurity Management 3
Providers using this tag (121)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 4 Complete, well-documented, and agent-ready
Strong 11 Solid coverage with minor gaps
Developing 36 Usable, with meaningful gaps to close
DragosSysdigKenna SecurityArmisProjectDiscoveryGreyNoise IntelligenceQwiet AiUpwindSnyk ContainerHackNoticePyntSynackScalarrAxoniusMethod SecurityHorizon3.aiAccuKnoxFossaGoogle Cloud Security Command CenterRoot (fka Slim.ai)Dependency-TrackPlerionRegScaleRed Hat Enterprise LinuxBinarlyCybleSocketBlack DuckForward NetworksCyCognitoStackHawkPlexTracNucleiSAFE SecurityBalbixStream.Security
Thin 22 Limited public surface area
Emerging 30 Early or largely undocumented
Minimal 17 Almost no public developer surface
Unrated 1 Not yet scored
APIs with this tag (24)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 1 Complete, well-documented, and agent-ready
Strong 5 Solid coverage with minor gaps
Red Hat Advanced Cluster Security APIREST API for managing Kubernetes-native security including vulnerability management, compliance, network se...Red Hat OCP Vulnerability Dashboard APIAPI for tracking and analyzing vulnerabilities affecting OpenShift Container Platform clusters, providing C...Red Hat Security Data APIPublic API for querying Red Hat security data including CVE details, CSAF advisories, OVAL data, and vulner...Red Hat Vulnerability Management APIAPI for assessing and monitoring security vulnerabilities across RHEL systems, providing CVE tracking, seve...Iru Vulnerability Management APIThe Vulnerability Management API from Iru — 5 operation(s) for vulnerability management.
Developing 5 Usable, with meaningful gaps to close
NinjaOne Vulnerability Management APIVulnerability ManagementRegScale gRPC Ingestion ServicesRegScale publishes a gRPC contract library, rs-data, covering three high-volume ingestion services: AssetIn...Black Duck SCA REST APIREST API for Black Duck SCA (Hub) — projects, versions, components, vulnerabilities, policies, scans, and r...PlexTrac APIPlexTrac's JWT-authenticated REST API (v1 and v2) for managing clients, reports, findings, assets, and cont...Balbix REST APIThe Balbix REST API (v1) gives programmatic read access to the asset, vulnerability, misconfiguration, soft...
Thin 8 Limited public surface area
Mondoo Platform GraphQL APIThe Mondoo Platform API is a GraphQL API for programmatically querying assets, configuring integrations, an...Finite State GraphQL APIGraphQL API historically documented at https://platform.finitestate.io/api/v1/graphql and still the transpo...Finite State Platform APIToken-authenticated REST API for the Finite State platform, served under /api/public/v0 on the platform hos...Rapid7 InsightVM Cloud APIREST API for the InsightVM vulnerability management product, exposing assets, scans, vulnerabilities, remed...Nucleus Security Platform REST APIThe Nucleus platform API. Every platform capability is exposed over REST, documented with Swagger inside th...Synopsys Seeker REST APIThe Seeker REST API provides programmatic access to Seeker IAST (Interactive Application Security Testing) ...Onapsis Platform APIGraphQL-based public API for The Onapsis Platform. Introduced with support for Assess (vulnerability and sc...ArmorCode APIArmorCode's REST API for programmatic access to findings, integrations, and remediation workflows across th...
Emerging 5 Early or largely undocumented
Manifest Cyber APIThe official public API for the Manifest Cyber platform v1. Used by Manifest's frontend apps and internal E...Forescout eyeInspect Command Center REST APIREST API for the eyeInspect (SilentDefense) OT/ICS Command Center, providing access to asset inventory (hos...Kodem APIThe Kodem platform API. The service is reachable at https://api.kodemsecurity.com and is fully authenticate...Brinqa Platform APIGraphQL API for the Brinqa Platform. Query assets, findings, hosts, tickets, and vulnerabilities using Grap...Qualys VMDR APIREST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asse...
Companies reaching this through an API (3)
These companies publish an API, specification or operation carrying “Vulnerability Management” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Score breakdown
Frequency
58.6
log-scaled weighted occurrences
Breadth
2.7
spread across providers
Quality lift
34.3
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor
Where this tag sits
121 providers carry this tag directly, and 148 counting the 4 narrower tags below — 27 more to reach.
Security broader
Vulnerability Scanning
21 providers
CVE
9 providers
Exposure Management
24 providers
Vulnerabilities
4 providers
Related tags
DevSecOps 32 co-occurrences
Application Security 28 co-occurrences
Vulnerabilities 21 co-occurrences
Exposure Management 18 co-occurrences
Cybersecurity 69 co-occurrences
Attack Surface Management 15 co-occurrences
Penetration Testing 14 co-occurrences
SBOM 14 co-occurrences
Where this tag comes from
Provider tag125
Api tag24
Openapi tag2
Openapi op tag8
Markets provisional
Kin Score markets whose measured providers carry this tag. Share is the fraction of the market's measured providers that carry it — it describes the market, not this tag.
| Market | Share of the market's providers |
|---|---|
| Software Supply Chain (SBOM, Signing, Open Source Security) | 30% |
| Security (EDR, SIEM, SOAR) | 24% |
Cohort brief
Auto-generatedThe 118 providers in the APIs.io catalog tagged Vulnerability Management, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.
Providers
118
of 121 in the catalog
Mean Kin Score
33.3
+11.1 vs catalog 22.2
Mean Agent Readiness
18.8
+6.8 vs catalog 12
Spread
3.4–79.1
median 33.6 · σ 18.9
How the 118 split by band
Exemplar 4Strong 11Developing 36Thin 22Emerging 30Minimal 15
Facet averages, against the whole catalog
| Facet | This cohort | Catalog | Difference | Scored |
|---|---|---|---|---|
| Developer Ergonomics | 36.5 | 23.2 | +13.3 | 118 |
| Operational Transparency | 24.9 | 13 | +11.9 | 118 |
| Access Clarity | 34.2 | 23.9 | +10.3 | 118 |
| Contract Quality | 26.1 | 17.2 | +8.9 | 118 |
| Discoverability | 65.3 | 57.9 | +7.4 | 118 |
| Contract Governance | 10 | 6.5 | +3.5 | 118 |
A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.
What this cohort publishes
| Artifact | This cohort | Catalog | Difference |
|---|---|---|---|
| MCP server (any) | 27% | 13% | +14 |
| MCP server (first-party) | 24% | 12% | +12 |
| Agent Skills | 0% | 0% | 0 |
| OAuth scopes | 17% | 11% | +6 |
| Security | 98% | 98% | 0 |
| Arazzo workflows | 3% | 2% | +1 |
| Governance rules | 18% | 16% | +2 |
mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.
Top by Kin Score
- 1 Snyk 79.1
- 2 ControlUp 75.6
- 3 Malwarebytes 69.1
- 4 Tenable 67.6
- 5 CrowdStrike 65.6
- 6 Sonatype 63.3
- 7 OpenText Cybersecurity 60.4
- 8 Feedly 59.6
- 9 Iru 59.6
- 10 Amazon IoT Device Defender 58.5
Top by Agent Readiness
- 1 Feedly 65.3
- 2 Armis 49.3
- 3 Horizon3.ai 48.4
- 4 Snyk 45.7
- 5 Dependency-Track 45.7
- 6 CYRISMA 41.5
- 7 Upwind 40.3
- 8 OpenText Cybersecurity 38.5
- 9 Tenable 38.1
- 10 watchTowr 37.9
All 121 members of this roster resolve to a provider in the
catalog; 118 carry a score (98%).
The figures above describe the scored members only.
Coverage caveat. 101 of 118 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Coverage caveat. 101 of 118 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.