emerging · 1.5

Vulnerability Management

Score 23.0 / 100 109 providers 23 APIs Search apis.io →
Variants seen in the corpus: Vulnerability Managementvulnerability-management

Providers using this tag (109)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 14 Solid coverage with minor gaps
KonduktoCompanyApplication SecurityASPM11 APIs62.5ControlUpDigital Employee ExperienceEndpoint ManagementVDIDaaS61 APIs61.8Red HatCloudContainersEnterpriseHybrid Cloud75 APIs59.1IruCompanyDevice ManagementMobile Device Managementapple-management3 APIs58.6Method SecurityCompanySecurityCybersecurityOffensive Security10 APIs58.5GreyNoise IntelligenceSecurityThreat IntelligenceCybersecurityIP Reputation10 APIs58.4FeedlyThreat IntelligenceCybersecuritycyber-threat-intelligenceContent Aggregation2 APIs57.5UpwindSecurityCloud SecurityCNAPP12 APIs57.0Cisco PSIRT openVuln APISecurityThreat IntelligenceDisclosure3 APIs56.4CybelAngelCompanyCybersecurityThreat Intelligenceexternal-attack-surface-management7 APIs56.4XbowSecurityPenetration TestingOffensive SecurityArtificial Intelligence9 APIs56.1MalwarebytesCompanySecurityCybersecurityEndpoint Security52 APIs55.3FleetCompanyDeveloper ToolsDevice ManagementMDM1 API55.1TenableCompanyEnterpriseCybersecurity107 APIs54.7
Developing 29 Usable, with meaningful gaps to close
Qwiet AiCompanySecurityApplication SecuritySAST27 APIs53.8Snyk ContainerContainer ImagesContainersKubernetesSecurity3 APIs53.8SysdigCloud SecurityContainersKubernetesRuntime Security13 APIs50.9MendApplication SecuritySoftware Composition AnalysisSASTContainer Security47 APIs49.9ProjectDiscoveryCompanyCybersecuritySecurityVulnerability Scanning20 APIs49.9Amazon IoT Device DefenderComplianceIoTSecurity69 APIs49.7SynackCompanySecurityPenetration Testing28 APIs49.5NinjaOneCompanyDeveloper ToolsIT ManagementRMM22 APIs49.3Red Hat Enterprise LinuxAutomationComplianceEnterpriseLinux5 APIs49.2PlerionCompanySecurityCloud SecurityCSPM13 APIs49.1Google Cloud Security Command CenterCloud SecurityComplianceRisk ManagementSecurity4 APIs48.1FossaCompanySecuritySoftware Supply ChainOpen-Source1 API48.0CyCognitoCompanyCybersecurityAttack Surface ManagementExposure Management12 APIs47.7ArmorCompanyCybersecurityManaged Detection and ResponseCloud Security70 APIs47.4BinarlyCompanySecurityFirmware SecuritySupply Chain Security20 APIs47.4DragosCompanyCybersecurityOT SecurityICS4 APIs47.3Upwind SecurityCompanyCybersecurityCloud SecurityCNAPP12 APIs47.0SocketCompanySecuritySoftware Supply Chain SecurityDependency Scanning20 APIs46.5Horizon3.aiCompanySecurityCybersecurityPenetration Testing1 API46.4Root (fka Slim.ai)CompanySecurityContainer Security20 APIs45.3CybleThreat IntelligenceCybersecurityAttack Surface ManagementInternet Scanning1 API45.0StackHawkAPI SecurityApplication SecurityDASTSecurity Testing14 APIs44.4ScalarrCompanyCybersecurityRuntime SecurityAI Agent Security2 APIs43.8CoalitionCyber InsuranceInsuranceInsurtechRisk Management2 APIs43.5Rapid7SecuritySIEMXDR50 APIs42.7TideliftCompanyOpen-SourceSoftware Supply ChainDependency Management15 APIs42.6Forward NetworksCompanyNetworksNetwork AutomationNetwork Digital Twin20 APIs40.9MondooCompanyCybersecuritySecurity1 API40.3Cybersecurity and Infrastructure Security AgencyAdvisoriesAISBinding Operational DirectiveCSAF4 APIs39.4
Thin 21 Limited public surface area
Fortify SoftwareCompanySecurityApplication SecurityAppSec28 APIs38.2watchTowrCompanySecurityCybersecurityAttack Surface Management20 APIs37.4SonatypeSoftware Supply ChainSecuritySBOM58 APIs37.1ARMOKubernetes SecurityCloud Native SecurityCNAPPDevSecOps8 APIs36.9Black Duck SoftwareCompanySecurityApplication SecuritySoftware Composition Analysis36.4PlexTrac, LLCCompanyCybersecurityPenetration Testing1 API36.1BalbixCompanyCybersecuritySecurityRisk Management1 API36.0IruCompanyDevice ManagementApple MDMEndpoint Security1 API36.0Finite StateProduct SecuritySoftware Supply Chain SecuritySBOMFirmware Analysis3 APIs35.3SnykSecurityDevSecOpsApplication Security48 APIs33.8SynopsysSoftware SecurityApplication Security TestingStatic AnalysisSoftware Composition Analysis8 APIs33.8Black DuckCompanyEnterpriseApplication SecuritySoftware Composition Analysis1 API33.7VirsecCompanySecurityCybersecurityApplication Security2 APIs32.8Empirical SecurityCompanySecurityCybersecurity3 APIs32.6Microsoft Defender for CloudCloud SecurityCSPMCWPPCNAPP5 APIs29.6OnapsisCompanyCybersecurityApplication Security1 API27.9CynomiCompanyCybersecuritySecurityCompliance1 API27.1DeepwatchCompanyCybersecurityManaged Detection and ResponseSecurity Operations1 API27.1ArmorCodeCompanySecurityApplication Security1 API26.9HeelerCompanySecurityApplication SecurityDevSecOps26.7Orca SecurityAgentlessAPI SecurityCIEMCloud Security2 APIs26.4
Emerging 31 Early or largely undocumented
TolmoCompanySecurityCybersecurityCloud Security1 API25.8Manifest CyberCybersecuritySBOMSupply Chain Security7 APIs25.6Jit (fka Cbrix)CompanyCybersecurityApplication SecurityDevSecOps1 API25.2Lacework FortiCNAPPCloud SecurityCNAPPComplianceThreat Detection1 API24.3ForescoutCompanyCybersecurityNetwork SecurityDevice Visibility3 APIs22.5ArmisCompanyDefense GovernmentSecurityCybersecurity21.9Nebula SecurityCompanySecurityCybersecurity21.9QualysSecurityComplianceVMDR2 APIs21.9ChainguardCloud-NativeContainer ImagesContainersDevSecOps6 APIs21.8Bishop FoxCompanyCybersecurityOffensive SecurityPenetration Testing1 API21.4BrinqaCompanyCybersecurityExposure Management1 API21.2Kenna SecurityCompanyCybersecurityRisk-Based Prioritization1 API19.9KodemCompanyCybersecurityApplication SecurityRuntime Security1 API19.4Copa (Project Copacetic)BuildKitCLICNCF SandboxContainer Patching3 APIs17.7EchoCompanySecuritySupply Chain SecurityContainer Security17.6AsteliaCompanySecurityExposure Management17.4Zafran SecurityCompanySecurityCybersecurity17.2RunsybilCompanySecurityOffensive SecurityPenetration Testing15.1depthfirstCompanySecurityApplication SecurityCybersecurity14.6WizCloud SecurityCNAPPCSPM1 API14.6RavenCompanySecurityApplication SecurityRuntime Security14.4CogentCompanySecurityCTEM13.8Novee SecurityCompanySecurityCybersecurityPenetration Testing13.3RapidFortCompanySecurityContainer SecuritySoftware Supply Chain12.7Efflux SystemsCompanySecurityCybersecurityAttack Surface Management1 API12.6FlashpointCompanyThreat IntelligenceCybersecuritySecurity1 API12.6EnclaveCompanySecurityApplication SecurityCloud Security12.4PenteraCompanyCybersecuritySecurityPenetration Testing12.2Lupin & HolmesCompanyCybersecuritySecurityOffensive Security11.8TAAI Labs, IncCompanySecurityApplication SecurityArtificial Intelligence11.8RemedioCompanyCybersecuritySecurityRemediation11.2
Minimal 14 Almost no public developer surface
OligoCompanySecurityApplication SecurityRuntime Security9.7A SecurityCompanySecurityCybersecurityOffensive Security7.8DuxCompanySecurityCybersecurity7.1CloudcoreoCompanyCloud SecurityCloud Configuration6.8AntigenCompanySecurityCybersecurityPenetration Testing6.3Hex SecurityCompanySecurityPenetration TestingApplication Security6.3TripwireCompanyCybersecurityFile Integrity MonitoringSecurity Configuration Management5.3BionicCompanyCybersecurityCloud SecurityApplication Security5.0DazzCompanyCybersecurityCloud SecurityApplication Security5.0eEye Digital SecurityCompanyCybersecuritySecurity5.0HuaunCompanyEnterpriseCybersecurityAttack Surface Management5.0Internet Security SystemsCompanySecurityCybersecurityNetwork Security5.0SilkCompanyCybersecuritySecurity5.0Veriti.aiCompanyCybersecurityExposure Management5.0

APIs with this tag (23)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 8 Solid coverage with minor gaps
Red Hat Advanced Cluster Security APIREST API for managing Kubernetes-native security including vulnerability management, compliance, network se...59.1Red Hat OCP Vulnerability Dashboard APIAPI for tracking and analyzing vulnerabilities affecting OpenShift Container Platform clusters, providing C...59.1Red Hat Security Data APIPublic API for querying Red Hat security data including CVE details, CSAF advisories, OVAL data, and vulner...59.1Red Hat Vulnerability Management APIAPI for assessing and monitoring security vulnerabilities across RHEL systems, providing CVE tracking, seve...59.1Iru Endpoint Management APITenant-scoped REST API for the Iru (formerly Kandji) endpoint platform. 121 operations across 94 paths cove...58.6Feedly APIREST API over api.feedly.com/v3 for the Feedly Threat Intelligence platform. Collect articles from AI Feeds...57.5CybelAngel ADM Inventory APIAttack surface (Asset Discovery & Monitoring) inventory. Lists discovered assets and their hostnames, lists...56.4Malwarebytes Vulnerability Management APIThe Vulnerability Management API from Malwarebytes — 14 operation(s) for vulnerability management.55.3
Developing 3 Usable, with meaningful gaps to close
NinjaOne Vulnerability Management APIVulnerability Management49.3Rapid7 InsightVM Cloud APIREST API for the InsightVM vulnerability management product, exposing assets, scans, vulnerabilities, remed...42.7Mondoo Platform GraphQL APIThe Mondoo Platform API is a GraphQL API for programmatically querying assets, configuring integrations, an...40.3
Thin 7 Limited public surface area
PlexTrac APIPlexTrac's JWT-authenticated REST API (v1 and v2) for managing clients, reports, findings, assets, and cont...36.1Finite State GraphQL APIGraphQL API historically documented at https://platform.finitestate.io/api/v1/graphql and still the transpo...35.3Finite State Platform APIToken-authenticated REST API for the Finite State platform, served under /api/public/v0 on the platform hos...35.3Synopsys Seeker REST APIThe Seeker REST API provides programmatic access to Seeker IAST (Interactive Application Security Testing) ...33.8Black Duck SCA REST APIREST API for Black Duck SCA (Hub) — projects, versions, components, vulnerabilities, policies, scans, and r...33.7Onapsis Platform APIGraphQL-based public API for The Onapsis Platform. Introduced with support for Assess (vulnerability and sc...27.9ArmorCode APIArmorCode's REST API for programmatic access to findings, integrations, and remediation workflows across th...26.9
Emerging 5 Early or largely undocumented
Manifest Cyber APIThe official public API for the Manifest Cyber platform v1. Used by Manifest's frontend apps and internal E...25.6Forescout eyeInspect Command Center REST APIREST API for the eyeInspect (SilentDefense) OT/ICS Command Center, providing access to asset inventory (hos...22.5Qualys VMDR APIREST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asse...21.9Brinqa Platform APIGraphQL API for the Brinqa Platform. Query assets, findings, hosts, tickets, and vulnerabilities using Grap...21.2Kodem APIThe Kodem platform API. The service is reachable at https://api.kodemsecurity.com and is fully authenticate...19.4

Score breakdown

Frequency
58.1
log-scaled weighted occurrences
Breadth
3.0
spread across providers
Quality lift
38.5
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

DevSecOps 33 co-occurrences Application Security 30 co-occurrences Exposure Management 17 co-occurrences SBOM 15 co-occurrences Cybersecurity 59 co-occurrences Vulnerabilities 15 co-occurrences Cloud Security 22 co-occurrences Attack Surface Management 13 co-occurrences

Where this tag comes from

Provider tag105
Api tag23
Openapi tag2
Openapi op tag3

Cohort brief

Auto-generated

The 109 providers in the APIs.io catalog tagged Vulnerability Management, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
109
all scored
Mean Kin Score
32
+11.3 vs catalog 20.7
Mean Agent Readiness
16.9
+7.2 vs catalog 9.7
Spread
5–62.5
median 33.7 · σ 17.4
How the 109 split by band
Exemplar 0Strong 14Developing 29Thin 21Emerging 31Minimal 14
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 34.3 17.9 +16.4 109
Contract Quality 28.1 17.5 +10.6 109
Access Clarity 32.9 22.3 +10.6 109
Operational Transparency 21.7 11.3 +10.4 109
Discoverability 70.6 60.4 +10.2 109
Contract Governance 12.5 6.4 +6.1 109

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 39% 16% +23
MCP server (first-party) 17% 7% +10
Agent Skills 0% 0% 0
OAuth scopes 19% 9% +10
Security 97% 88% +9
Arazzo workflows 5% 2% +3
Governance rules 12% 13% -1

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Kondukto 62.5
  2. 2 ControlUp 61.8
  3. 3 Red Hat 59.1
  4. 4 Iru 58.6
  5. 5 Method Security 58.5
  6. 6 GreyNoise Intelligence 58.4
  7. 7 Feedly 57.5
  8. 8 Upwind 57
  9. 9 Cisco PSIRT openVuln API 56.4
  10. 10 CybelAngel 56.4
Top by Agent Readiness
  1. 1 Feedly 57.9
  2. 2 Upwind Security 52.9
  3. 3 Red Hat 52.3
  4. 4 CybelAngel 44.4
  5. 5 Upwind 43.7
  6. 6 Horizon3.ai 43.2
  7. 7 Armor 43
  8. 8 Socket 41.2
  9. 9 CyCognito 38.7
  10. 10 watchTowr 38.7
All 109 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 25 August 2026, across 26891 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/vulnerability-management"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/vulnerability-management"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/vulnerability-management/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.