Our first API, CVE Triage, is live. The Free plan includes 100 credits a month.
Official public data, cleaned up and served by API.
Vulnerability feeds, sanctions lists, recall notices and company registers are free to download and awkward to use. We collect them from the source, check them every night and return them as consistent JSON, on one key and one credit balance.
curl https://api.stackbyte.app/v1/cve/CVE-2021-44228 \ -H "X-API-Key: sb_live_..."
{
"data": {
"vulnerability.id": "CVE-2021-44228",
"vulnerability.score.base": 10.0,
"vulnerability.severity": "critical",
"stackbyte.kev.listed": true,
"stackbyte.epss.score": 0.97,
"stackbyte.triage.priority": "P1"
},
"meta": {
"credits_charged": 1,
"cached": false,
"sources": [
{
"id": "cisa-kev",
"data_as_of": "2026-09-24",
"coverage": "live"
},
...
]
}
}What we are building
Seven APIs on one key, in build order. Each answers a specific question from sources you could check yourself.
- 01CVE TriageIs this vulnerability being exploited, and how likely is it to be?Live
- 02Package RiskIs this npm, PyPI or Go package known to be vulnerable or malicious?Next
- 03Cloud IntelWhich provider, region and network does this IP address belong to? Is it a Tor exit?Next
- 04Sanctions ScreenDoes this name appear on a UN, UK, EU, US or UAE sanctions list?Planned
- 05Product RecallsHas this product been recalled in the UK, EU or US?Planned
- 06UAE Company VerifyIs this UAE trade licence valid, and what is the company registered to do?Planned
- 07Dubai Property DataWhat have comparable Dubai properties sold and rented for?Planned
Free plan: 100 credits a month. Paid plans from $19 a month.
How we handle the data
- Official sources only
- Every dataset comes from a government register, an official API or a public feed whose licence allows commercial use. Each response names its sources.
- Checked every night
- Each import has to pass checks on structure and volume before it replaces the previous day's data. If a source is down or looks wrong, the API keeps serving the last good copy and tells you its date.
- Record lookups only
- The APIs answer questions about specific records. We do not sell copies of whole datasets.
- As little personal data as possible
- Where a record could identify a person, we keep only what a lookup needs and act on removal requests.
Stackbyte Studio
Need hands-on help?
Stackbyte Studio is our services team. We design and build websites, mobile apps, custom APIs and integrations, and run SEO, GEO and go-to-market (GTM) work.
Each project starts with a written scope and, where possible, a fixed price. After launch we can host and maintain the work, or hand it over to you with the code and documentation.
Studio is run by the team that builds the Stackbyte APIs.
BuildMake something new
GrowGet found and grow
- 1DiscoveryWhat you need, who will use it and how you will measure it.
- 2ProposalScope, timeline and price, fixed where the scope allows.
- 3BuildWeekly check-ins and a working preview from early on.
- 4SupportHosting, maintenance and growth work, if you want it.
Get a free API key
The Free plan includes 100 credits a month across every Stackbyte API. Leave your email and we will send your key, usually within one working day, and tell you when each new API launches. We will not use your address for anything else. To come off the list, reply to any of our emails or write to team@stackbyte.app.