CISA KEV Stats

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats

Statistics on the CISA Known Exploited Vulnerabilities catalog.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/cisa-kev-stats')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "added_in_last_1_day": 1,
  "added_in_last_7_days": 7,
  "added_in_last_30_days": 43
}

Content-Type: application/json
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Authentication

Send your API key in the apikey request header.

Response Fields

Field	Type
`added_in_last_1_day`	integer
`added_in_last_7_days`	integer
`added_in_last_30_days`	integer

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`added_in_last_1_day`	number	`1`
`added_in_last_7_days`	number	`7`
`added_in_last_30_days`	number	`43`

Examples

The saved example from the Deepinfo API, shown in the request and response panels.

OKGET/explore/vulnerability-insight/cisa-kev-stats200 OK

Worked Examples

Worked examples of this endpoint, each on its own page with the exact request and the response it returns.

KEV Additions in the Last 30 DaysHow many CVEs CISA added to the KEV catalog in the last day, 7 days and 30 days.

See the example

Reference updated September 27, 2026