heretix-api
Vulnerability intelligence API aggregating NVD, OSV, CVE Records (CNA), CISA KEV, and vendor advisories into one searchable REST API with deduplication and risk scoring.
Ficha actualizada 23 sept 2026, 6:29 · upstream 23 sept 2026, 6:23 · release v0.2.1
Qué es heretix-api
Descripción editorial construida a partir del repositorio, su documentación y sus señales de mantenimiento.
Heretix is a high-performance vulnerability management API that collects and normalizes data from multiple sources including the Open Source Vulnerabilities database (OSV), NIST NVD, CVE Records (CNA), CISA KEV, and vendor-specific advisories. It provides fast, deduplicated search results through a unified master table keyed by CVE ID. The system includes malware detection capabilities via integration with the OSSF malicious-packages repository, risk scoring using CISA KEV flags, EPSS exploitation probability scores, and SSVC assessments from Vulnrichment. Designed for self-hosted deployment on PostgreSQL with Docker Compose support.
- Security teams aggregating vulnerability data across multiple sources into a single dashboard
- DevSecOps pipelines integrating vulnerability scanning results with CI/CD workflows
- Incident response operations using real-time CVE and KEV threat intelligence feeds
- Automated remediation orchestration based on risk scores from CISA KEV and EPSS data
- Single PostgreSQL database eliminates the need for Redis, reducing infrastructure complexity
- Malware detection via integration with OSSF malicious-packages repository
- Full NVD CVE record mirror (~240k records) with incremental delta updates
- CISA KEV and EPSS risk scoring integrated directly into vulnerability results
- Vendor advisory support from Cisco, Fortinet, Palo Alto Networks, and more
- No Redis-based caching layer — all data is stored in PostgreSQL; high-volume queries may impact performance without indexing optimization
- Malware detection relies on external OSSF repository integration which requires network connectivity to the malicious-packages source
- Vendor advisory support (e.g., Fortinet, Palo Alto) depends on vendor API availability and openVuln client credentials
Perfil de infraestructura
Estimación inicial derivada del repositorio y de los servicios detectados.
Despliegue detectado
Qué señales reales de instalación hemos encontrado.
Deploy using Docker Compose with PostgreSQL. Configure environment variables for database connection string, API key, and optional CISA KEV/Cisco credentials. Run `pnpm migrate:all` before starting to backfill existing data. For production, use `pnpm build && pnpm start`. Enable job control via POST /api/v1/jobs/:source/run or PATCH /api/v1/jobs/:source with {"enabled": true/false}. Monitor import status at http://localhost:5000/dashboard.
Stack y dependencias
Componentes inferidos a partir de manifests, configuración y documentación.
Experiencia real de la comunidad
Ayuda a contrastar la estimación automática con instalaciones reales.
Todavía no hay datos comunitarios para este proyecto.