API Reference

List Top Vendors

Return the top N CPE vendors ranked by total CVE count, giving you a quick view of which vendors carry the largest vulnerability surface. This endpoint shares the /v1/cpe collection path with Search Products and is selected by setting the ranking query parameter to top_vendors.

GET

/v1/cpe

Cost: 1 credit per successful call

Query parameters

rankingstringrequired

Selects this ranking endpoint. The only accepted value is top_vendors.

limitintegeroptionaldefault 25

Number of vendors to return. Accepted range: 1–50.

Request

curl "https://api.edgeprotect.io/functions/v1/cpe?ranking=top_vendors&limit=10" \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY"

Response

{
  "data": {
    "count": 5,
    "limit": 10,
    "items": [
      { "vendor": "microsoft", "cve_count": 12438, "product_count": 312, "version_count": 2841, "kev_count": 247, "last_cve_published": "2026-05-17" },
      { "vendor": "oracle",    "cve_count": 10954, "product_count": 198, "version_count": 1103, "kev_count":  89, "last_cve_published": "2026-05-15" },
      { "vendor": "google",    "cve_count":  7211, "product_count":  84, "version_count":  620, "kev_count":  74, "last_cve_published": "2026-05-16" }
    ],
    "generated_at": "2026-05-18T10:24:31.118Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.countintegeroptional

Number of vendors returned (equals items.length).

data.limitintegeroptional

The maximum number of vendors requested.

data.itemsarrayoptional

Vendors ranked by total CVE count, descending. Each object contains the fields below.

data.items[].vendorstringoptional

Lowercased vendor identifier as stored in the CPE catalog.

data.items[].cve_countintegeroptional

Total number of distinct CVEs affecting any product under this vendor.

data.items[].product_countintegeroptional

Number of distinct products tracked for this vendor.

data.items[].version_countintegeroptional

Number of distinct product versions tracked for this vendor.

data.items[].kev_countintegeroptional

Number of this vendor's CVEs listed in the CISA Known Exploited Vulnerabilities catalog.

data.items[].last_cve_publishedstringoptional

ISO 8601 date of the most recently published CVE for this vendor.

data.generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Status	`error`	When
400	`invalid_limit`	A parameter failed validation.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The route or entity does not exist (including a `ranking` value other than `top_vendors`).
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.