# cve.vigilbase.com

> Which edge WAF vendors (Cloudflare, AWS, Microsoft Azure, Google Cloud, Fastly, F5, Akamai, OWASP CRS) say they ship a rule for each exploited CVE, when, and whether it blocks by default. Every claim quotes and links the vendor's own changelog. Run by Vigilbase.

Coverage is claimed by vendors, not measured. "No public claim" is not "unprotected". The [WAF benchmark](https://cve.vigilbase.com/bench) is the measured side: the same public exploit requests for each CISA KEV vulnerability sent daily through each vendor configuration in front of one origin.

## Machine access

- [MCP server](https://cve.vigilbase.com/mcp): streamable HTTP, tools scan_dependencies (send a lockfile), get_cve_coverage, check_exposure, get_waf_benchmark, list_trending, search_cves, get_scan_stats, list_new_rules, compare_vendors, list_exploited_gaps
- [WAF benchmark JSON](https://cve.vigilbase.com/api/v1/bench): every configuration and CVE verdict; /api/v1/bench/<CVE id> for one CVE; [Markdown](https://cve.vigilbase.com/bench.md)
- Discovery: [API catalog](https://cve.vigilbase.com/.well-known/api-catalog), [MCP server card](https://cve.vigilbase.com/.well-known/mcp/server-card.json), [Agent Skills](https://cve.vigilbase.com/.well-known/agent-skills/index.json), [AI catalog](https://cve.vigilbase.com/.well-known/ai-catalog.json)
- [CVE JSON](https://cve.vigilbase.com/api/v1/cves/CVE-2021-44228): one CVE with per-vendor coverage and quoted sources
- [CVE search JSON](https://cve.vigilbase.com/api/v1/cves?q=confluence&view=exploited): views exploited | covered | gap | all
- [Site check JSON](https://cve.vigilbase.com/api/v1/exposure?cve=CVE-2021-44228&domain=example.com): the edge in front of a hostname (public DNS only) joined with that vendor's coverage
- [Dependency scan](https://cve.vigilbase.com/api/v1/scan): POST {filename, content} or multipart file; returns vulnerable packages with exploitation and WAF coverage
- [Scan statistics](https://cve.vigilbase.com/api/v1/stats)
- [Rule feed JSON](https://cve.vigilbase.com/api/v1/feed): newest vendor rule changes naming a CVE
- [Vendor comparison JSON](https://cve.vigilbase.com/api/v1/vendors)
- [RSS](https://cve.vigilbase.com/feed.xml)
- Markdown: append .md to /cve/<id>, or send Accept: text/markdown

## Pages

- [WAF benchmark](https://cve.vigilbase.com/bench)
- [Our lab (OWASP CRS)](https://cve.vigilbase.com/lab)
- [Methodology](https://cve.vigilbase.com/methodology)
- [Vendors](https://cve.vigilbase.com/vendors)
- [Source status](https://cve.vigilbase.com/sources)