CIRCL CVE Search vs IBM X-Force Exchange API

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d98.0%98.0%
Uptime · 30d96.7%98.3%
P50 · ms698238
P95 · ms2765868
AuthapiKeyapiKey
CORSyesno
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree tier — API key requiredFree tier — API key required
Rate limitUnpublishedUnpublished
In directory since2026-07-052026-07-05
operationalpartialdownno data

CIRCL CVE Search vs IBM X-Force Exchange API: common questions

Which is more reliable, CIRCL CVE Search or IBM X-Force Exchange API?

Both are neck-and-neck — CIRCL CVE Search and IBM X-Force Exchange API each measure 98.0% uptime over 90 days on our probe schedule. Reliability here is verified from our own scheduled checks; use the 30-day bars above to see which has been steadier lately.

Which is faster, CIRCL CVE Search or IBM X-Force Exchange API?

IBM X-Force Exchange API has the lower median latency in our checks — CIRCL CVE Search responds in 698 ms versus IBM X-Force Exchange API at 238 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do CIRCL CVE Search and IBM X-Force Exchange API need an API key?

Both ask you to authenticate — CIRCL CVE Search uses an API key and IBM X-Force Exchange API uses an API key. Each key is free to obtain; the Auth and Card-required rows above spell out the signup terms.

Can I call CIRCL CVE Search and IBM X-Force Exchange API from the browser?

Only CIRCL CVE Search is browser-friendly — it returns CORS headers over HTTPS. IBM X-Force Exchange API needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are CIRCL CVE Search and IBM X-Force Exchange API free for commercial use?

CIRCL CVE Search has unclear commercial terms, and IBM X-Force Exchange API has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.