Cisco PSIRT openVuln API

cisco · Security

Security No Auth Free & Open security

The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.

Authentication

No authentication requiredFree to use with no key needed.

Sample Requests

GET GET /security/advisories/ios

Used to obtain all advisories that affects the given ios version

https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios?version=v1

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios?version=v1"

import requests
params = {
    "version": "v1"
}
response = requests.get(
    "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios",
    params=params,
)
print(response.json())

const url = new URL('https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios');
url.searchParams.set('version', 'v1');

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"net/url"
)

func main() {
	baseURL, _ := url.Parse("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios")
	q := baseURL.Query()
	q.Set("version", "v1")
	baseURL.RawQuery = q.Encode()
	targetURL := baseURL.String()
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios")
uri.query = URI.encode_www_form({
  "version" => "v1"
})

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/ios?" . http_build_query([
    "version" => "v1"
]);
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

GET GET /security/advisories/iosxe

Used to obtain all advisories that affects the given ios version

https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe?version=v1

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe?version=v1"

import requests
params = {
    "version": "v1"
}
response = requests.get(
    "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe",
    params=params,
)
print(response.json())

const url = new URL('https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe');
url.searchParams.set('version', 'v1');

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"net/url"
)

func main() {
	baseURL, _ := url.Parse("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe")
	q := baseURL.Query()
	q.Set("version", "v1")
	baseURL.RawQuery = q.Encode()
	targetURL := baseURL.String()
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe")
uri.query = URI.encode_www_form({
  "version" => "v1"
})

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/iosxe?" . http_build_query([
    "version" => "v1"
]);
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

GET GET /security/advisories/cvrf/product

Used to obtain all the advisories that affects the given product name.

https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product?product=example

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product?product=example"

import requests
params = {
    "product": "example"
}
response = requests.get(
    "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product",
    params=params,
)
print(response.json())

const url = new URL('https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product');
url.searchParams.set('product', 'example');

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"net/url"
)

func main() {
	baseURL, _ := url.Parse("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product")
	q := baseURL.Query()
	q.Set("product", "example")
	baseURL.RawQuery = q.Encode()
	targetURL := baseURL.String()
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product")
uri.query = URI.encode_www_form({
  "product" => "example"
})

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/cisco.com/0.0.3/security/advisories/cvrf/product?" . http_build_query([
    "product" => "example"
]);
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

Postman Setup Guide

Get Postman ↗

See official documentation for authentication and setup.

What can you build with Cisco PSIRT openVuln API?

Cisco PSIRT openVuln API is a Security API. Developers commonly use security APIs for:

adding multi-factor authentication to your app
validating identity documents and biometrics
monitoring for data breaches and leaked credentials
running background checks and fraud screening
scanning code and infrastructure for vulnerabilities

No authentication required. This API is open — no signup or key needed. Ideal for quick prototypes and public-facing features. Cisco PSIRT openVuln API is free to use, making it a low-risk choice to experiment with.

New to APIs? Read our beginner's guide · Learn about API keys · What is REST?

Open documentation ↗