niche · -1.3 marketcapability domainschema

Vulnerability Scanning

Score 17.5 / 100 23 providers +5 via APIs 12 APIs Search apis.io →
Business capabilities this tag reaches
Cybersecurity Management 1
Variants seen in the corpus: Vulnerability ScannerVulnerability Scanning

Providers using this tag (23)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
Amazon InspectorAmazon Web ServicesComplianceContainer SecurityEC231 APIs71.1
Strong 6 Solid coverage with minor gaps
ProjectDiscoveryCompanyCybersecuritySecurity1 API64.6GoHarborContainer RegistryContainersArtifacts2 APIs62.5CheckmarxApplication SecurityCode AnalysisDevSecOpsSAST3 APIs62.13-shakeCompanySREData IntegrationETL1 API59.2detectifyCompanySecurityCybersecurityAttack Surface Management1 API57.8FortifyApplication SecurityDASTDevSecOpsSAST3 APIs57.0
Developing 3 Usable, with meaningful gaps to close
NucleiSecurity TestingTestingDAST1 API42.7Aqua SecurityCloud-NativeContainersKubernetesRuntime Protection8 APIs39.5OWASP ZAPSecurity TestingApplication SecurityTesting1 API39.8
Thin 6 Limited public surface area
AnchoreContainer SecurityContainersSBOMSoftware Supply Chain1 API35.8Chaitin TechSecurityWeb Application FirewallWAFCybersecurity6 APIs35.3TrivyContainersKubernetesSBOMSecurity1 API31.6CloudsmithArtifact ManagementDeveloper ToolsDevOpsDevSecOps1 API31.3Invicti (formerly Acunetix)SecurityWeb Application SecurityAPI Testing31.2KubescapeKubernetes SecurityCloud Native SecurityContainer SecurityDevSecOps1 API26.7
Emerging 5 Early or largely undocumented
NeuVectorComplianceContainersKubernetesOpen Source1 API23.7InvictiAPI SecurityDASTSecurity1 API17.0GrypeContainer ImagesContainersOpen SourceSBOM1 API12.7Hack My WebsiteApplication SecurityWeb SecurityDAST1 API22.3StoikCompanyCyber InsuranceCybersecurityInsurtech18.4
Minimal 2 Almost no public developer surface
AuditonSecuritySoftware-as-a-ServiceCompliance9.4Tinfoil SecurityCompanySecurityApplication Security2.0

APIs with this tag (12)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 2 Complete, well-documented, and agent-ready
Harness Security Testing Orchestration APIAPIs for security vulnerability detection with over 40 scanner integrations for running scans, viewing resu...87.7Oracle Vulnerability Scanning APIThe Vulnerability Scanning API from Oracle — 41 operation(s) for vulnerability scanning.70.4
Strong 2 Solid coverage with minor gaps
Armor Vulnerability Scanning APIVulnerability scanning operations63.5Securify Scan Public APIPublic API for Securify Scan, 3-shake's automated vulnerability-diagnosis and ASM platform. A tenant create...59.2
Developing 2 Usable, with meaningful gaps to close
NucleiNuclei is an open source vulnerability scanner from ProjectDiscovery that uses YAML-based templates to find...42.7TrivyTrivy is a comprehensive open source security scanner for containers, Kubernetes, code repositories, clouds...39.5
Thin 3 Limited public surface area
Promptfoo Red TeamPromptfoo Red Team generates adversarial test cases against LLM applications targeting prompt injection, ja...36.0Trivy OperatorThe Trivy Operator is a Kubernetes-native security toolkit that automatically scans clusters and generates ...31.642Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...26.7
Emerging 3 Early or largely undocumented
Hack My WebsiteAutomated website security scanner. Only an agent-native surface (llms.txt) is publicly declared; no conven...22.3Invicti APIThe Invicti API provides programmatic access to Invicti security scanning capabilities, including API Disco...17.0GrypeGrype is an open source vulnerability scanner for container images and filesystems developed by Anchore. It...12.7

Companies reaching this through an API (5)

These companies publish an API, specification or operation carrying “Vulnerability Scanning” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

42Crunch Armor Harness Oracle Promptfoo

Score breakdown

Frequency
39.8
log-scaled weighted occurrences
Breadth
0.3
spread across providers
Quality lift
37.1
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Where this tag sits

Vulnerability Management broader

Related tags

DAST 7 co-occurrences Vulnerabilities 9 co-occurrences Security Testing 5 co-occurrences DevSecOps 12 co-occurrences Container Security 5 co-occurrences SBOM 6 co-occurrences API Security 5 co-occurrences

Where this tag comes from

Provider tag23
Api tag12
Openapi tag1
Openapi op tag8

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/vulnerability-scanning"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort (paid plan)
The distribution (Pro)

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.