shipapis
StarSubmit an APISubmit API

CVEDB vs National Vulnerability Database

Same instrument, two spec sheets — measured, not claimed.

APICVEDBHEALTHY98National Vulnerability DatabaseHEALTHY87
Uptime · 30d
Uptime · 90d99.44%91.6%
Uptime · 30d100%93.1%
P50 · ms196263
P95 · ms8014448
Authnonenone
CORSnoyes
HTTPSyesyes
Card requirednono
Commercial useunclearyes
Data licenseUnverifiedPublic domain (U.S. Government work)
Free tierFree — limits not publishedFree — no key required (free key raises limits)
Rate limitUnpublished5 requests per rolling 30 seconds without an API key (50 with a free key)
In directory since2026-07-052026-07-05
operationalpartialdownno data

CVEDB vs National Vulnerability Database: common questions

Which is more reliable, CVEDB or National Vulnerability Database?

On our scheduled checks, CVEDB leads on measured uptime — CVEDB at 99.44% versus National Vulnerability Database at 91.6% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Which is faster, CVEDB or National Vulnerability Database?

CVEDB has the lower median latency in our checks — CVEDB responds in 196 ms versus National Vulnerability Database at 263 ms (P50). Tail latency (P95) is in the table above; for most workloads the median is the number that shapes how the API feels.

Do CVEDB and National Vulnerability Database need an API key?

Neither needs a paid key — CVEDB is callable with no signup, and National Vulnerability Database is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call CVEDB and National Vulnerability Database from the browser?

Only National Vulnerability Database is browser-friendly — it returns CORS headers over HTTPS. CVEDB needs a server-side call or proxy, so factor that into which one fits a front-end project.

Are CVEDB and National Vulnerability Database free for commercial use?

CVEDB has unclear commercial terms, and National Vulnerability Database allows commercial use on its free tier. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.