CVEs & Subdomains
Browse the CVE catalog
GET /api/cves
Returns slim rows with ID, description, CVSS, EPSS, and KEV flags.
Get one CVE
GET /api/cves/{cveId}
Returns the full record: description, references, CVSS vector and score, EPSS score, and KEV status.
Per-app CVE scoping
GET /api/apps/{id}/cves — the same catalog, scoped to the app’s identity and tech stack, including the app’s exposure state (open / fixed / reopened) for CVEs its audits have touched. GET /api/apps/{id}/cves/{cveId} adds the per-app exposure history.
The catalog is refreshed daily from NVD, CISA KEV, and FIRST EPSS. See CVE Intelligence for the product-level picture.
Trigger a subdomain scan
POST /api/subdomains
Returns a
runId immediately — the scan runs asynchronously.
Check scan results
GET /api/subdomains/{runId}
Returns the discovered subdomains (with the source that surfaced each and resolution status), the resolved count, and — when run against an app — the diff versus the previous scan (newSubdomains / removedSubdomains).
New-subdomain detections against a monitored app also trigger email and Slack notifications.