Vuln. Database APIs for free

Several options provide free access to vulnerability data and security APIs, catering to different needs from general vulnerability information to specific API security testing.

1. Vulnerability & CVE Data APIs:

• National Vulnerability Database (NVD): The NVD provides comprehensive information on Common Vulnerabilities and Exposures (CVEs). While the official NVD API might have usage restrictions, open-source projects like nvd-api on GitHub offer free, public RESTful APIs to access NVD data.
• CVE Search (CIRCL): This service offers an API to search and retrieve information on CVEs, including details and related resources.
• Vulners: Vulners provides a search engine and API for vulnerabilities, offering a broad database of security advisories and exploits.

2. API Security Testing Tools with Free Tiers:

• 42Crunch: This platform offers a freemium model for API security testing. Users can access their API security testing tools, including operation audits and scans, for free with limitations on monthly usage after registering.
• Akto: Akto is an open-source and commercial DAST and API Security tool that includes automated API discovery and vulnerability scanning in CI/CD environments. The open-source version provides significant functionality.
• ZeroThreat: This tool offers a free vulnerability scanner specifically designed for modern web applications and APIs, focusing on detecting OWASP Top 10 and CWE Top 25 issues.

3. General Cybersecurity APIs (some with free tiers):

• AbuseIPDB: Offers an API to check IP addresses for reported abuse.
• Google Safe Browsing: Provides an API to check URLs against Google's lists of unsafe web resources.
• VirusTotal: Allows analysis of files and URLs for malware and other threats, with a free public API for non-commercial use.

4. Open-Source Vulnerability Scanners (often with API capabilities or integration options):

• OWASP ZAP: A widely used open-source web application security scanner with an extensive API for integration into development workflows.
• OpenVAS: An open-source vulnerability scanner that integrates into the Greenbone Vulnerability Management system, offering a robust solution for network and system vulnerability assessments.
• Nmap: A powerful network discovery and security auditing tool that can be used for vulnerability scanning, and its output can be parsed for integration.

When choosing a free vulnerability API or tool, consider your specific requirements, such as the type of vulnerabilities you need to detect (e.g., web application, network, API-specific), the volume of data or scans required, and the ease of integration into your existing workflows.