Vendor Vulnerability Pulse (VVP)
Vendor Vulnerability Pulse (VVP) gives security teams a single API call to score any software vendor's cybersecurity risk posture in real time. What it does Submit a vendor name — Microsoft, Apache, OpenSSL, Salesforce, any vendor in your stack — and VVP returns a composite risk score (0-100) drawn from five authoritative sources: - NVD (National Vulnerability Database): Total CVE count and…
Vendor Vulnerability Pulse (VVP) endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET |
Vendor Pulse Score /api/v1/vendor/{vendor_name}/pulse |
Score a vendor's vulnerability posture across 5 intelligence feeds (NVD CPE, NVD CVE, CISA KEV, EPSS, GHSA). Returns composite risk score, severity breakdown, exploitation… |
| POST |
Stack Analysis /api/v1/stack/pulse |
Analyze vulnerability risk across a portfolio of up to 20 vendors simultaneously. Returns composite stack risk score, risk distribution by tier, exploit correlation, shared… |
| GET |
Vendor Trending /api/v1/vendor/{vendor_name}/trend |
Retrieve historical risk data and trajectory analysis for a vendor. Returns time series of pulse scores, trajectory classification (IMPROVING, STABLE, DEGRADING, CRITICAL_SPIKE),… |
| GET |
Health Check /api/v1/health |
Check VVP API health status and data feed freshness. Returns service status, uptime, and last update timestamps for each intelligence feed. |
| POST |
Submit Feedback /api/v1/feedback |
Submit scoring feedback for Bayesian weight personalization. Send vendor name and feedback type (too_high, too_low, accurate) to calibrate VVP scores to your risk tolerance over… |
Vendor Vulnerability Pulse (VVP) pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $49 / month | — |
|
| ULTRA Recommended | $99 / month | — |
|
| MEGA | $499 / month | — |
|