CVE Intelligence for agents: API

CVE Intelligence for agents: API is a vulnerability intelligence tool that reads the CVE catalog and pulls incremental updates through a JSON API.

Casco provides CVE intelligence for agents through a public JSON API and RSS feed. It allows users to read the full CVE catalog, save a checkpoint, and pull incremental updates without requiring an API key. The service includes endpoints for checking dependencies and SBOMs across multiple ecosystems like npm, PyPI, Cargo, and Maven. Users can submit package lists or CycloneDX and SPDX documents to find matching advisory records. The platform processes requests securely, caches successful lookups, and preserves component references and input order.

CVE Intelligence for agents: API at a glance

Best for: Software engineer
Runs on: Web, API
Pricing: Free
Released: October 2026
Category: AI research tool
Website: casco.com

Key features

Read full CVE catalog via public JSON API
Pull incremental CVE updates using pagination
Subscribe to recent updates via RSS feed
Check dependency lockfiles and SBOMs
Submit batch package requests for vulnerability checks
Inspect advisory evidence and fixed versions

Use it for

Mirror the complete CVE catalog
Poll for incremental vulnerability updates
Check software dependencies for known vulnerabilities
Process CycloneDX and SPDX SBOM documents

Alternatives to CVE Intelligence for agents: API

AiSOC — Runs locally without API keys with bundled models and auditable reasoning ledgers.
ScopeWeaver — Coordinates autonomous security agents and asset scope in a single console.
Senro — Tests WebMCP tools and monitors AI agent behavior without building infrastructure.
SoL Pi — Saves $8.75 to $13.50 per hour compared to native Codex and Claude Code systems.
Clef — Offers low latency and high-speed classification for agentic workflows.
Jonex — Provides traceable, agent-ready knowledge from diverse enterprise data sources.
ktx — It gives data agents a shared context workspace of approved metrics and git-based files.
VoidAccess — It combines parallel Tor collection, entity extraction, and relationship mapping.
Scrape Anything by Context.dev — Extracts clean Markdown, HTML, and structured data with built-in proxies and JS rendering.
Pandasi Agent — Determines if a token packet is complete enough for further research without executing trades.
WeKnora — Combines RAG, multi-step agents, and automatic Wiki generation in one platform.
Paper2Agent — It enables direct interaction with research papers and automatic result reproduction.

All CVE Intelligence for agents: API alternatives