👁 Vulnerability & Security Intel Aggregator avatar

Vulnerability & Security Intel Aggregator

Pricing

$21.00 / 1,000 result items

👁 Vulnerability & Security Intel Aggregator

Vulnerability & Security Intel Aggregator

Pull live security intel from GitHub Advisories, MITRE ATT&CK, Exploit DB, OpenSSF Scorecard and URLhaus in one feed. Get CVE IDs, severity, affected packages, threat techniques and active malware URLs. Built for SecOps, threat intel and DevSecOps.

Pricing

$21.00 / 1,000 result items

Rating

0.0

(0)

Developer

👁 ParseForge

ParseForge

Maintained by Community

Actor stats

Bookmarked

Total users

Monthly active users

23 days ago

Last modified

🛡️ Vulnerability & Security Intel Aggregator

🚀 Query 5 authoritative security feeds in one run. GitHub GHSA advisories, MITRE ATT&CK techniques, Exploit-DB exploits, OpenSSF Scorecard projects and URLhaus malware URLs - aggregated, normalized, exported.

🕒 Last updated: 2026-05-27 · 📊 10 fields per record · 5 sources · global vulnerability, exploit, malware and supply-chain intelligence

The Vulnerability & Security Intel Aggregator queries five independent security data sources in parallel and returns a unified stream of records. Each record is tagged with its source so you can filter, dedupe or split by platform downstream.

The combination spans coordinated disclosures (GHSA), adversary tradecraft (MITRE ATT&CK), proof-of-concept exploits (Exploit-DB), open-source supply-chain hygiene (OpenSSF Scorecard) and active malware infrastructure (URLhaus).

🎯 Target Audience	💡 Primary Use Cases
SOC / DFIR / threat intel teams	Daily intel feed
AppSec / DevSecOps	Dependency risk scoring
Red teams / pentesters	Exploit and TTP lookup
CTI vendors and researchers	Cross-source enrichment

📋 What the Vulnerability & Security Intel Aggregator does

Queries up to 5 distinct security APIs and feeds in parallel (Promise.allSettled)
Applies a unified keyword across every source that exposes search
Normalizes every record to the same 10-field shape
Returns one tagged stream - source: ghsa | mitre | exploitdb | openssf | urlhaus
Continues with the remaining sources if one fails

💡 Why it matters: one input, one dataset, five authoritative security feeds.

🎬 Full Demo (🚧 Coming soon)

⚙️ Input

Field	Type	Required	Description
query	string	no	Keyword applied to GHSA, MITRE, Exploit-DB
sources	array of enum	no	Subset of `ghsa, mitre, exploitdb, openssf, urlhaus`
maxItems	integer	no	Free 10 / Paid up to 1,000,000
openssfRepos	array	no	Repos to score against OpenSSF Scorecard
proxyConfiguration	object	no	Apify Proxy (recommended for Exploit-DB)

{
"maxItems":20,
"sources":["ghsa","mitre","exploitdb","openssf","urlhaus"]
}

{
"query":"rce",
"maxItems":30,
"sources":["ghsa","exploitdb"]
}

⚠️ Good to Know: OpenSSF Scorecard needs an explicit list of repos. URLhaus and MITRE are public bulk feeds - the keyword is matched client-side.

📊 Output

Field	Type	Description
📡 source	string	ghsa / mitre / exploitdb / openssf / urlhaus
📌 title	string	Advisory summary, technique name, exploit title, repo name, malware host
🔗 url	string	Canonical URL on the source site
🆔 id	string	GHSA ID / Txxxx / EDB ID / repo / URLhaus ID
⚠️ severity	string	critical/high/etc. (GHSA), verified flag (Exploit-DB), URL status (URLhaus)
🏷️ category	string	CWE / technique vs. sub-technique / exploit type / threat type
🕒 date	string	Published / disclosed date
📝 summary	string	Source-specific summary
+ source-specific fields	varies	cveId, platform, score, checks, host, tags, etc.
🕒 scrapedAt	string	ISO timestamp
❌ error	string	Per-source error record (rare)

✨ Why choose this Actor

Differentiator	Detail
🌐 Five sources, one run	Save engineering and credits
🛡️ Resilient	One source failure does not stop the others
⚡ Parallel fetch	Concurrent fetchers
🧩 Unified schema	Same shape for every source
📦 Pay-per-event	Pay only for records collected

📈 How it compares to alternatives

Alternative	This Aggregator
Buy a CTI feed	No subscription, public sources only
Run 5 separate scrapers	Single run, single dataset
Build CVE-correlator yourself	Schema already normalized

🚀 How to use

Create a free account w/ $5 credit
Open the actor on Apify console
Pick sources (default = all 5)
Set query, openssfRepos, maxItems
Run

💼 Business use cases

SOC and DFIR

Need	How
Daily threat intel feed	Schedule daily, ingest into SIEM
IOC enrichment	Cross URLhaus with internal proxy logs

AppSec / DevSecOps

Need	How
SCA pre-screen	GHSA + OpenSSF for every release
Dependency hygiene	OpenSSF scores on every direct dependency

Red team / pentest

Need	How
TTP lookup	MITRE ATT&CK by keyword
Exploit research	Exploit-DB filtered by CVE / platform

CTI / research

Need	How
Cross-source enrichment	Join GHSA + MITRE + Exploit-DB on CVE
Supply-chain risk model	OpenSSF Scorecard portfolio scoring

🔌 Automating Vulnerability & Security Intel

Make / Zapier - push every new record to Slack, Jira, ServiceNow
Slack - daily critical-CVE digest
Airbyte / Fivetran - sync to your warehouse
GitHub Actions - fail builds on new high-severity advisory
Webhooks - push to your SOAR/SIEM

🌟 Beyond business use cases

Research

Cross-source CVE coverage analysis
Adversary TTP evolution studies

Personal

Track CVEs in your stack
Monitor your favourite OSS projects

Non-profit

Public-sector vulnerability tracking
Election-infrastructure monitoring

Experimentation

LLM-powered advisory triage
Knowledge graphs across vuln, exploit and TTP

🤖 Ask an AI assistant about this scraper

❓ Frequently Asked Questions

❓ Which sources? GHSA (GitHub Advisories), MITRE ATT&CK (Enterprise techniques), Exploit-DB, OpenSSF Scorecard, URLhaus.

❓ Can I pick a subset? Yes via the sources array.

❓ Do I need API keys? No. All sources expose public, unauthenticated endpoints.

❓ What if one source fails? Others keep going. The failing source emits an error record.

❓ How do I look up an exploit for a CVE? Pass the CVE as query and limit sources to ["ghsa","exploitdb"].

❓ Why OpenSSF Scorecard? Adds supply-chain hygiene scoring on top of pure vulnerability data.

❓ Is URLhaus output verified? Yes - abuse.ch maintains an active malware URL list.

❓ How fresh is the data? Real-time. Each source is queried live per run.

❓ Pricing model? Pay-per-event: billed per record actually pushed.

❓ Can I schedule it? Yes - use Apify Schedules.

🔌 Integrate with any app

Make, Zapier, n8n, Pipedream
Airbyte, Fivetran, Stitch
Slack, Discord, Microsoft Teams
Jira, ServiceNow, PagerDuty
Splunk, Elastic, Datadog
GitHub Actions, GitLab CI
Webhooks, REST API, S3, GCS

🔗 Recommended Actors

Actor	Why
MITRE ATT&CK Techniques Scraper	Standalone ATT&CK
Exploit-DB Exploits Scraper	Standalone Exploit-DB
OpenSSF Scorecard Projects Scraper	Standalone OpenSSF
URLhaus Malware URLs Scraper	Standalone URLhaus

💡 Pro Tip: browse the complete ParseForge collection.

🆘 Need Help? Open our contact form

⚠️ Disclaimer: independent tool, not affiliated with GitHub, MITRE, Offensive Security, OpenSSF or abuse.ch. Only publicly available data is collected.

👁 MITRE ATT&CK Techniques Scraper - Adversary Tactics avatar

MITRE ATT&CK Techniques Scraper - Adversary Tactics

parseforge/mitre-attack-techniques-scraper

Surface live security records from Mitre Attack Techniques with identifiers, severity, affected products, descriptions and references. Perfect for SOC teams, threat intel researchers and DevSecOps pipelines. Run on demand or on a recurring schedule and feed every row into your favourite analytics.

👁 User avatar

ParseForge

👁 🛡️ URLhaus Malware URLs Scraper avatar

🛡️ URLhaus Malware URLs Scraper

parseforge/urlhaus-malware-urls-scraper

Hunt down live security records from Urlhaus Malware Urls with identifiers, severity, affected products, descriptions and references. Trusted by SOC teams, threat intel researchers and DevSecOps pipelines. Run on demand or on a recurring schedule and feed every row into your favourite analytics o.

👁 User avatar

ParseForge

👁 Exploit-DB Exploits Scraper avatar

Exploit-DB Exploits Scraper

parseforge/exploit-db-exploits-scraper

Hunt down live security records from Exploit Db Exploits with identifiers, severity, affected products, descriptions and references. Trusted by SOC teams, threat intel researchers and DevSecOps pipelines. Run on demand or on a recurring schedule and feed every row into your favourite analytics or.

👁 User avatar

ParseForge

👁 GitHub Security Advisories Scraper avatar

GitHub Security Advisories Scraper

parseforge/github-security-advisories-ghsa-scraper

Scrape GitHub Security Advisories (GHSA) with full CVE mapping, CVSS severity scores, affected packages, version ranges, references, and patches. Filter by ecosystem (npm, PyPI, RubyGems, etc.) and severity. Perfect for SOC teams, vulnerability researchers, and DevSecOps pipelines.

👁 User avatar

ParseForge

👁 Threat Profiler avatar

Threat Profiler

peachstudio/threat-profiler

Generate AI-powered cyber threat intelligence reports in minutes. Get threat actor profiles with MITRE ATT&CK mappings, attack surface analysis, and security recommendations. Perfect for security assessments, M&A due diligence, and vendor risk management, but also to know your target in cyber sales.

👁 User avatar

Peach Studio

👁 Vulnerability & Threat Intel Feed avatar

Vulnerability & Threat Intel Feed

thoob/threat-intel-feed

Live vulnerability intelligence from the official public sources (NIST NVD CVE, CISA KEV, GitHub Security Advisories), merged by CVE into one enriched record and billed only per record delivered. Incremental: a run with nothing new bills nothing.

Pono Data

👁 NVD CVE Scraper - Vulnerability Database API avatar

NVD CVE Scraper - Vulnerability Database API

pink_comic/nvd-cve-vulnerability-database

Search the NIST NVD CVE vulnerability database by keyword, CVSS severity, vendor, or date. Use as an NVD scraper / CVE API for DevSecOps, patch management, threat intel, compliance monitoring, and security vulnerability research. No API key needed; pay per result.

👁 User avatar

Ava Torres

👁 GitHub Security Advisories Scraper avatar

GitHub Security Advisories Scraper

parseforge/github-security-advisories-scraper

Scrape the GitHub Global Security Advisories database. Filter by type (reviewed/unreviewed/malware), severity, affected package, CVE/GHSA ID, or publish date. Returns CVSS, CWE, affected version ranges, patched versions, references, and credits.

👁 User avatar

ParseForge

CVE Bulk Lookup

gocreative.ai/cve-bulk-lookup

Bulk-fetch CVE records: CVSS score, severity, affected products, references. For vuln-management, threat-intel, and patch prioritization.

GoCreative AI

👁 MITRE ATT&CK Knowledge Base Scraper avatar

MITRE ATT&CK Knowledge Base Scraper

compute-edge/mitre-attack-scraper

Extract MITRE ATT&CK techniques, tactics, groups, software, mitigations, and data sources from the Enterprise, Mobile, or ICS matrices. Filter by tactic phase or platform.

👁 User avatar

Compute Edge

URL: https://apify.com/parseforge/vulnerability-security-intel-scraper