Why buy now
In April 2026, NIST changed NVD operations to a risk-based model. CVEs still enter the NVD, but many are no longer scheduled for enrichment. For teams that depend on complete coverage, this creates blind spots and slower triage unless enrichment comes from another source.
Official source
NIST Updates NVD Operations to Address Record CVE Growth
NIST confirms a risk-based model where many CVEs are no longer scheduled for enrichment.
Coverage analysis
Two Months In: Impact of NIST Enrichment Cutbacks
Volerion analysis of coverage and enrichment throughput after the April 2026 operational change.
The data layer your program needs
Volerion analyzes every newly published CVE, so your team can triage with reliable scoring, mapped products, and meaningful source context.
CVSS 3.1 and CVSS 4.0 vectors
Severity scoring that helps your team prioritize remediation quickly.Dictionary-validated CPEs
Normalized product mappings so affected assets are easier to identify.Categorized reference tagging
Links grouped by source type so analysts can review evidence faster.Context-rich CVE descriptions
Expanded vulnerability context that makes each record more actionable.Our API stays compatible with NVD 2.0 request and response formats, so your existing parsers and workflows keep working. We enrich every CVE and inject the missing context directly into that same schema, so downstream systems receive complete records in the format they already trust.
Keep your established NVD 2.0 request patterns.
Receive enriched CVEs in familiar NVD 2.0 response shapes.
Missing fields are injected so records arrive complete for triage.
Simple production access
All plans include the same complete enrichment coverage. Scale request volume and support as your operational needs grow.
Trial
Free 30 days
Validate your integration with real enrichment data.
Limited requests and rolling 30-day data window
Start evaluationBasic
EUR 499 / month
For daily internal security workflows and standard operational volume.
120 requests per minute
Request Basic accessPro
EUR 799 / month
For production integrations and larger security programs.
300 requests per minute
Request Pro accessAPI access is for internal security workflows. Commercial redistribution, white-label use, and AI training datasets require a separate agreement.
FAQ
NVDAPI.com is an NVD API alternative powered by Volerion. It provides NVD 2.0-compatible access to fully enriched CVE records.
Yes. Most integrations can keep their existing requests, parsers, and workflows. You only need to change the base URL.
Records include CVSS 3.1 and 4.0 vectors, validated CPEs, affected versions, improved descriptions, and categorized references.
Most new CVEs are enriched within 10 minutes. Complex or unusually large records can take up to a few hours.
Yes. NVDAPI.com uses a separate production endpoint, reducing your dependency on NVD availability and helping prevent failed synchronization cycles.
Rate limits vary by plan. We offer options for evaluation, regular ingestion, and high-volume production use.
No. NVDAPI.com uses credentials issued by Volerion instead of a NIST NVD API key.
Our graph-based approach models each vulnerability as auditable attack paths. Enrichment such as CVSS is then derived from that structured analysis. You can watch our VulnCon26 talk to learn how it works. Our public CISA Vulnrichment corrections also show real examples of us identifying and correcting problems in public vulnerability data.
NVD-compatible API by Volerion
Tell us about your use case and we will follow up with access details.
