Why buy now
In April 2026, NIST changed NVD operations to a risk-based model. CVEs still enter the NVD, but many are no longer scheduled for enrichment. For teams that depend on complete coverage, this creates blind spots and slower triage unless enrichment comes from another source.
Official source
NIST Updates NVD Operations to Address Record CVE Growth
NIST confirms a risk-based model where many CVEs are no longer scheduled for enrichment.
Coverage analysis
Two Months In: Impact of NIST Enrichment Cutbacks
Volerion analysis of coverage and enrichment throughput after the April 2026 operational change.
The data layer your program needs
NVD’s cutback pushes enrichment onto your team, whether you’re ready to staff it or not. We take on that work for a fraction of the cost of building it in-house, so your pipeline keeps receiving reliable scoring, mapped products, and meaningful source context.
CVSS 3.1 and CVSS 4.0 vectors
Severity scoring that helps your team prioritize remediation quickly.Dictionary-validated CPEs
Normalized product mappings so affected assets are easier to identify.Categorized reference tagging
Links grouped by source type so analysts can review evidence faster.Context-rich CVE descriptions
Expanded vulnerability context that makes each record more actionable.Our API stays compatible with NVD 2.0 request and response formats, so your existing parsers and workflows keep working. We enrich every CVE and inject the missing context directly into that same schema, so downstream systems receive complete records in the format they already trust.
Keep your established NVD 2.0 request patterns.
Receive enriched CVEs in familiar NVD 2.0 response shapes.
Missing fields are injected so records arrive complete for triage.
Simple production access
All plans include the same complete enrichment coverage. Scale request volume and support as your operational needs grow.
Free
For evaluation
€0
Validate your integration with real enrichment data.
Developer
For individuals
€49 / month
For individual developers and small integrations.
Team
For production
€199 / month
For production integrations and larger security programs.
Enterprise
Custom limits, SLA, bulk feeds, OEM/redistribution, and dedicated contract support for large-scale deployments.
API access is for internal security workflows. Commercial redistribution, white-label use, and AI training datasets require a separate agreement. Prices are excl. VAT where applicable, taxes calculated at checkout.
FAQ
NVDAPI.com is an NVD API alternative powered by Volerion. It provides NVD 2.0-compatible access to fully enriched CVE records.
Yes. Most integrations can keep their existing requests, parsers, and workflows. You only need to change the base URL.
Records include CVSS 3.1 and 4.0 vectors, validated CPEs, affected versions, improved descriptions, and categorized references.
Most new CVEs are enriched within 10 minutes. Complex or unusually large records can take up to a few hours.
Yes. NVDAPI.com uses a separate production endpoint, reducing your dependency on NVD availability and helping prevent failed synchronization cycles.
Rate limits vary by plan. We offer options for evaluation, regular ingestion, and high-volume production use.
No. NVDAPI.com uses credentials issued by Volerion instead of a NIST NVD API key.
We've spent over 3 years automating CVE enrichment and specializing in standards like CVSS, CPE, and SSVC. During that time, we developed a unique graph-based approach that models each vulnerability as auditable attack paths. Enrichment such as CVSS is then derived from that structured analysis. You can watch our VulnCon26 talk to learn how it works. Our public CISA Vulnrichment corrections also show real examples of us identifying and correcting problems in public vulnerability data.
NVD-compatible API by Volerion
Tell us about your use case and we will follow up with access details.
Enter your email and we will send a verification link. Your API key will be generated right after verification.
