Catalog

The catalog endpoints expose the vendor and product reference data used for asset matching and watchlist subscriptions. These endpoints require authentication (any tier with a session or API key).

Protocols are not exposed through a catalog endpoint. To retrieve CVEs for a given ICS protocol, use GET /api/v1/cves/protocol/{name}.

Endpoints

Search Vendors

Returns up to 10 canonical vendors matching q, ranked by relevance and CVE coverage. q empty returns the top 10 by product count.

Each result includes the vendor's slug. Pass this value straight to GET /api/v1/cves/vendor/{slug} — do not construct it from the name. Slugs are assigned server-side and are not always the lowercased, hyphenated name (some vendors use underscores or retain punctuation), so deriving one yourself will silently 404.

curl -H "Authorization: Bearer bs_live_..." \
  "https://breachspider.com/api/v1/catalog/vendors?q=siemens"

[
  {
    "id": 110,
    "name": "Siemens",
    "slug": "siemens",
    "cve_product_count": 1842
  }
]

Search Products

Returns up to 15 products for a vendor that have at least one CVE. vendor_id is required; q is optional.

curl -H "Authorization: Bearer bs_live_..." \
  "https://breachspider.com/api/v1/catalog/products?vendor_id=110&q=s7"

[
  {
    "id": 4521,
    "name": "SIMATIC S7-1500",
    "cve_count": 96
  }
]

Get Vendor Detail

curl -H "Authorization: Bearer bs_live_..." \
  "https://breachspider.com/api/v1/vendors/110"

{
  "id": 110,
  "name": "Siemens",
  "slug": "siemens",
  "description": null,
  "logo_url": null,
  "website_url": null,
  "cve_count": 2841
}

Common ICS Vendors

Use GET /api/v1/catalog/vendors?q= to find IDs for your vendors. Notable tracked vendors include Siemens, Schneider Electric, Rockwell Automation, ABB, Honeywell, Mitsubishi Electric, Omron, Yokogawa, Beckhoff, GE Vernova, Emerson, AVEVA, Johnson Controls, Advantech, and Moxa.