PatchBrief API

Put PatchBrief where work already happens.

Use the live JSON feed to move source-backed vulnerability briefs into dashboards, SIEM enrichment, Slack alerts, ticket queues, and patch reports.

Get Team API access Open feed.json

Quickstart

The launch API is a static JSON endpoint. It works with curl, scheduled jobs, serverless functions, and no SDK.

GET https://www.patchbrief.org/feed.json

curl -s https://www.patchbrief.org/feed.json

Each response includes feed metadata, source health, and normalized brief records that are easy to filter downstream.

Field	Use
`pipeline.sources`	Monitor source health for CISA KEV, MSRC, NVD, GitHub, CERT/CC, Exploit-DB, and EPSS.
`items[].type`	Filter by KEV, Patch Tuesday, vendor advisory, coordinated disclosure, or exploit activity.
`items[].signal`	Route known exploited, critical advisory, patch review, or threat activity items differently.
`items[].vendor`	Match briefs to vendor watchlists or asset owners.
`items[].operator_check`	Populate tickets with the next practical verification step.
`items[].sources`	Keep every downstream record linked to the public source claim.

The endpoint is open during launch. Team is the paid API tier for teams that need PatchBrief to become a dependable workflow.

Help mapping fields into Slack, SIEM, ticketing, dashboards, and patch reports.

Simple exports and historical feed support for reporting, pilots, and team rollout.

Direct support when the feed powers an operational workflow or evaluation.

Future private API keys can be added behind Cloudflare Access or a lightweight API gateway when paid usage justifies it.