{"uid":"cap_fjtD1kYS-hoo3ZwxVG1HL","slug":"cisa-kev-vendor-vulnerability-intelligence-859415a2","name":"CISA KEV Vendor Vulnerability Intelligence","description":"Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions.","url":"https://vuln-intel.x402tookit.com/kev-vendor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["vendor"],"properties":{"vendor":{"type":"string","description":"Vendor name or part, e.g. Microsoft, Fortinet, Ivanti"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"latest":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"product":{"type":["null","string"]},"dateAdded":{"type":["null","string"]}}}},"source":{"type":["null","string"]},"kevCves":{"type":["null","number"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"thresholds":{"type":["null","object"],"properties":{"severalAt":{"type":["null","number"]},"frequentAt":{"type":["null","number"]}}},"topProducts":{"type":["array","null"],"items":{"type":"object","properties":{"cves":{"type":["null","number"]},"product":{"type":["null","string"]}}}},"ransomwareUse":{"type":["null","number"]},"vendorsMatched":{"type":["array","null"],"items":{"type":"string"}}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4t5HrHPfVG7tUEwvXkU_T","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns the count of CISA Known Exploited Vulnerabilities, affected products, ransomware usage, and latest CVE additions for a given vendor.","exampleAgentPrompt":"Pull the CISA KEV vendor profile for Ivanti — I want to know how many exploited CVEs they have, which products are most affected, and whether any are tied to ransomware.","exampleUseCases":[{"title":"Vendor risk assessment before procurement","prompt":"Before we renew our Fortinet contract, can you check CISA KEV to see how many known exploited vulnerabilities they have, which products are affected, and if ransomware groups are using them?"},{"title":"Security briefing on recent threat actor targets","prompt":"I'm putting together a threat briefing — can you pull the CISA KEV stats for Microsoft, including their total exploited CVE count, top products, and the most recently added CVEs?"},{"title":"Incident response vendor exposure check","prompt":"We just got hit and suspect it's Ivanti-related — quickly check CISA KEV for Ivanti's exploited vulnerability count, affected products, and any ransomware connections."}],"resultDescription":"Returns a structured record including: total number of CVEs in CISA KEV for the vendor, a verdict and human-readable summary, list of top affected products with CVE counts, ransomware use count, the most recently added CVEs (with CVE ID, product, and date added), matched vendor name(s), data source and URL, and optional thresholds or degraded-mode flags.","failureModes":["Vendor name not found or matched — returns empty or null vendorsMatched with no KEV data","Ambiguous vendor name matching multiple vendors — may return aggregated or partial results","CISA KEV data source temporarily unavailable — degraded flag set to true with stale or null data","Missing required vendor query parameter — request rejected with validation error","Vendor has zero KEV entries — returns valid response with kevCves of 0 and empty latest list"],"whenToPreferThis":"Use this endpoint when you need a vendor-level aggregated view of exploited vulnerabilities from the CISA KEV catalog — specifically when you want ransomware linkage, product breakdowns, and recency signals for a named vendor rather than a single CVE or package lookup. Prefer this over CVE-specific endpoints when conducting vendor risk assessments, procurement due diligence, or threat briefings.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:19:01.457Z","isFirstParty":false,"canonicalSlug":"cisa-kev-vendor-vulnerability-intelligence-859415a2"}