niche · -1.7 marketcapability domainschemaresource

Vulnerability Scanning

Score 18.1 / 100 21 providers +5 via APIs 12 APIs Search apis.io →
Business capabilities this tag reaches
Cybersecurity Management 1
Variants seen in the corpus: Vulnerability ScannerVulnerability Scanning

Providers using this tag (21)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 5 Solid coverage with minor gaps
GoHarborContainer RegistryContainersArtifacts2 APIs62.1FortifyApplication SecurityDASTDevSecOpsSAST3 APIs57.43-shakeCompanySREData IntegrationETL1 API57.0CheckmarxApplication SecurityCode AnalysisDevSecOpsSAST3 APIs57.0Amazon InspectorComplianceContainer SecurityEC2Lambda2 APIs55.0
Developing 4 Usable, with meaningful gaps to close
NucleiSecurity TestingTestingDAST1 API41.7Aqua SecurityCloud-NativeContainersKubernetesRuntime Protection8 APIs40.8ProjectDiscoveryCompanyCybersecuritySecurity1 API53.5detectifyCompanySecurityCybersecurityAttack Surface Management1 API41.6
Thin 5 Limited public surface area
AnchoreContainer SecurityContainersSBOMSoftware Supply Chain1 API37.3OWASP ZAPSecurity TestingApplication SecurityTesting1 API36.2Chaitin TechSecurityWeb Application FirewallWAFCybersecurity6 APIs34.5TrivyContainersKubernetesSBOMSecurity1 API32.8CloudsmithArtifact ManagementDeveloper ToolsDevOpsDevSecOps1 API32.3
Emerging 6 Early or largely undocumented
NeuVectorComplianceContainersKubernetesOpen Source1 API23.0InvictiAPI SecurityDASTSecurity1 API16.7GrypeContainer ImagesContainersOpen SourceSBOM1 API14.1KubescapeKubernetes SecurityCloud Native SecurityContainer SecurityDevSecOps1 API26.0Hack My WebsiteApplication SecurityWeb SecurityDAST1 API24.0StoikCompanyCyber InsuranceCybersecurityInsurtech16.1
Minimal 1 Almost no public developer surface
Tinfoil SecurityCompanySecurityApplication Security2.0

APIs with this tag (12)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 1 Complete, well-documented, and agent-ready
Harness Security Testing Orchestration APIAPIs for security vulnerability detection with over 40 scanner integrations for running scans, viewing resu...89.2
Strong 3 Solid coverage with minor gaps
Oracle Vulnerability Scanning APIThe Vulnerability Scanning API from Oracle — 41 operation(s) for vulnerability scanning.65.9Armor Vulnerability Scanning APIVulnerability scanning operations60.0Securify Scan Public APIPublic API for Securify Scan, 3-shake's automated vulnerability-diagnosis and ASM platform. A tenant create...57.0
Developing 2 Usable, with meaningful gaps to close
NucleiNuclei is an open source vulnerability scanner from ProjectDiscovery that uses YAML-based templates to find...41.7TrivyTrivy is a comprehensive open source security scanner for containers, Kubernetes, code repositories, clouds...40.8
Thin 2 Limited public surface area
Promptfoo Red TeamPromptfoo Red Team generates adversarial test cases against LLM applications targeting prompt injection, ja...36.3Trivy OperatorThe Trivy Operator is a Kubernetes-native security toolkit that automatically scans clusters and generates ...32.8
Emerging 4 Early or largely undocumented
42Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...26.0Hack My WebsiteAutomated website security scanner. Only an agent-native surface (llms.txt) is publicly declared; no conven...24.0Invicti APIThe Invicti API provides programmatic access to Invicti security scanning capabilities, including API Disco...16.7GrypeGrype is an open source vulnerability scanner for container images and filesystems developed by Anchore. It...14.1

Companies reaching this through an API (5)

These companies publish an API, specification or operation carrying “Vulnerability Scanning” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

42Crunch Armor Harness Oracle Promptfoo

Score breakdown

Frequency
41.5
log-scaled weighted occurrences
Breadth
0.5
spread across providers
Quality lift
38.0
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Where this tag sits

Vulnerability Management broader

Related tags

DAST 7 co-occurrences Vulnerabilities 9 co-occurrences Security Testing 5 co-occurrences SBOM 6 co-occurrences DevSecOps 11 co-occurrences API Security 5 co-occurrences Application Security 6 co-occurrences

Where this tag comes from

Provider tag21
Api tag12
Openapi tag1
Openapi op tag8

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/vulnerability-scanning"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/vulnerability-scanning"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/vulnerability-scanning/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.