APITube Documentation
Sign inGet started

Cyber Security API ​

Get cyber security news from /v1/cyber-security/news. Each article includes a cyber block with vulnerability IDs (CVEs), affected vendors and the highest severity score (CVSS) stated in the article. It also shows whether a mentioned vulnerability appears in CISA's Known Exploited Vulnerabilities (KEV) catalog. Other fields use the standard News API format.

What the Cyber Security API gives you ​

  • Vulnerability details per article. Read CVE IDs, KEV status, affected vendors and severity scores from cyber.cves, cyber.in_kev, cyber.vendors and cyber.cvss, without searching the article text yourself.
  • The full News API filter set. Language, date range, source, title search, entities, sentiment, event types, sorting, pagination, facets, field selection and exports work exactly as on /v1/news/everything.

How the Cyber Security API selects articles ​

  1. Add language, date, source or other filters to narrow the feed.
  2. Read cyber for vulnerability details. The CVE IDs come from the article's title, description or body. KEV status shows whether a mentioned vulnerability is known to have been used in real attacks.

Coverage limits ​

  • CVE IDs must be written out. cyber.cves lists IDs in the CVE-YYYY-NNNN form found in the text. An article that only says "a critical Fortinet flaw" has an empty list.
  • cyber.cvss is the highest score stated in the article. If the article gives no score, the field is null.
  • cyber.vendors lists vendors for the article's CVEs that are in KEV. Other companies mentioned in the article do not appear in this field.

Pricing and plans ​

  • A request that returns articles costs 1 point, the same as /v1/news/everything. A request that returns an empty page is not charged.
  • The endpoint is available on every plan, including Free. Plan limits are the same as for /v1/news/everything: on Free, per_page is capped at 10, the article body is hidden and exports other than JSON are not available. See Rate limits and quotas.
  • The prompt parameter works here too. It requires Basic or above and adds 2 points when the wording has not been parsed before.
  • If your API key is restricted to specific endpoints, it needs the cyber_security_news scope. Unrestricted keys work as they are.

Next steps ​

  • Quickstart — GET and POST requests, response fields, limits and error codes.
  • Filters — News API filters for security feeds.
  • Response format — what each cyber field means.
  • Use cases — exploited-vulnerability alerts, vendor watch, daily digests.