Verifiable exploited-CVE evidence for cyber insurance.
Cyber risk turns on actively-exploited vulnerabilities. Dynamic Feed matches the software you name against CISA's live Known Exploited Vulnerabilities catalog and returns a signed record carrying source and retrieval time, so an underwriter or adjuster has checkable evidence of what public data showed about the named stack.
The call
Keyless over MCP, or one REST call with a free key. Every datapoint is provenance-stamped and citeable.
# Keyless over MCP — point any client at https://dynamicfeed.ai/mcp
# Or one signed REST call (free key) — full reference at https://dynamicfeed.ai/docs:
curl -s https://dynamicfeed.ai/v1/batch -H "Content-Type: application/json" \
-d '{"calls":[{"tool":"","args":{}}]}' Sample response
{ "cve": "CVE-2026-1234", "in_kev": true, "epss": 0.97,
"measured_at": "...Z", "source": "CISA KEV + FIRST.org EPSS",
"signature": { "alg": "Ed25519", "key_id": "df-ed25519-6ca0de29113b" } }Why live data
Cyber underwriting and claims both hinge on one question: was a known-exploited vulnerability listed against the insured's declared stack, and when was the public catalog retrieved? Dynamic Feed serves the live CISA KEV catalog, enriched with FIRST.org EPSS and CVSS, and supported paths sign the result over its exact bytes. You name the software; we match it against public data and return a source-attributed record carrying retrieval time that either side can re-check. Dynamic Feed does not scan or see anyone's systems. This is not a security assessment, audit, guarantee, legal or coverage advice, or a determination of liability.
Use it for
- A signed record of exploited-CVE exposure for a named stack, at a point in time
- An underwriting input for cyber / tech E&O — verifiable, not self-reported
- Claims evidence: what KEV data showed at the time of an incident
- A policy-condition input you can require and re-check (drafting is your decision)
FAQ
Does Dynamic Feed scan our systems?
No — we can't see your systems. You name the software you run; we match it against CISA's public, exploited-in-the-wild KEV data and return a signed record of what that public data showed. Evidence, not a scan.
Is this a security assessment or a guarantee?
No. It is a signed, source-attributed record carrying retrieval time for public exploited-CVE data matched to a declared stack — not an audit, assessment or guarantee of security. One checkable input among many.
How fresh is the KEV data?
Live — the record carries the exact measurement time, and the signature verifies against /.well-known/keys. CISA adds to the KEV catalog as new exploitation is observed.