Real-time vendor risk intelligence. One API call.
Enterprise-grade vulnerability intelligence designed for security teams that move fast.
Sourced directly from the National Vulnerability Database. Updated continuously. No third-party lag, no stale feeds.
Monitor your vendors continuously. New CVEs surface in your next API query — no manual checking required.
Precise product matching via Common Platform Enumeration. Query by vendor, product, version, or ecosystem.
REST JSON with OpenAPI spec. Integrates into your stack in an afternoon.
Submit a vendor name or CPE string. VVP resolves the canonical identifier and begins continuous monitoring.
Query the pulse endpoint anytime new vulnerabilities are published for your vendors.
Risk scores, CVSS vectors, affected versions, and remediation context in every response. Decide faster.
The VVP API returns structured risk data in a single response. No pagination for standard queries. No complex aggregations on your end.
# Query vendor risk with curl curl -X POST https://vvp-api.lyrastone.com/api/v1/pulse \ -H "Content-Type: application/json" \ -d '{"vendor": "cisco"}' # Or with Python requests import requests response = requests.post( "https://vvp-api.lyrastone.com/api/v1/pulse", json={"vendor": "microsoft"} ) pulse = response.json() print(pulse["composite_risk_level"]) # "MEDIUM" print(pulse["cve_summary"]["total"]) # 7
Every plan includes NVD-backed data, CPE matching, and fast cached responses.
Built for security engineers, DevSecOps teams, and GRC analysts who need vendor vulnerability data without the noise.
Early adopter feedback welcome. Help shape the API, influence the roadmap, and get priority access to new capabilities.
Product updates, new data sources, and API improvements. No spam, ever.
By subscribing you agree to receive occasional product emails from Lyrastone. Unsubscribe anytime.
Free tier. No credit card. Live in five minutes.