Skip to content
Signals
Monitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real timeMonitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real time

Vendor Risk

Vendor Risk API

Assess vendor security posture based on CVE exposure, patch cadence, threat actor targeting and dark web mentions. Scores are mock samples only.

Example use cases

  • Third-party risk management workflows
  • Vendor onboarding security reviews
  • Supply chain risk scoring
  • Regulatory compliance evidence

Endpoints

Vendor Risk Response

Vendor risk assessment with composite score, CVE exposure and patch metrics.

vendor*

Vendor name

string

riskScore*

Composite risk score (0-100)

number

level*

Risk level: low, medium, high, critical

string

cveCount*

Open CVE count

number

patchedPercent*

Percentage of CVEs patched

number
{ "vendor": "Example Corp", "riskScore": "62", "level": "medium", "cveCount": "14", "patchedPercent": "78" }

Safety notes

Risk scores are mock calculations — not verified assessments.

Vendor names are fictional or public examples.

No proprietary vendor security data is exposed.

Vendor Risk API — Enterprise API | Dragons Community