> ## Documentation Index
> Fetch the complete documentation index at: https://exa.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> The Exa API is served at https://api.exa.ai. Authenticate with `Authorization: Bearer $EXA_API_KEY` (or `x-api-key: $EXA_API_KEY`); create keys at https://dashboard.exa.ai/api-keys.
> Prefer the official SDKs, `exa-py` (`pip install exa-py`) and `exa-js` (`npm install exa-js`); both read `EXA_API_KEY` from the environment.
> Tool-using agents can call Exa without writing code through the hosted MCP server at https://mcp.exa.ai/mcp, or install the Exa agent skill with `npx skills add exa-labs/agent-skills` (skill file: https://exa.ai/docs/skill.md).
> The OpenAPI specs at https://exa.ai/docs/exa-spec.yaml and https://exa.ai/docs/team-management-spec.yaml are the source of truth for request and response schemas.

# Cybersecurity

> Find vulnerabilities, advisories, threat reporting, and trust documentation with Exa Search.

Use Exa Search for vulnerability records, vendor advisories, and threat research from the sources security teams already read.

## Included

* CVE and GHSA vulnerability records
* Vendor security advisories and patch notes
* Threat intelligence reports and incident write-ups
* Trust pages, subprocessor lists, and compliance documentation
* Security blogs, conference talks, and research

## Use it for

* Vulnerability triage and exposure assessment
* Threat intelligence and adversary tracking
* Vendor risk and third-party security reviews
* Security monitoring and alerting

## Example queries

### Triage a vulnerability class

Name the product, version range, and severity.

```text theme={null}
critical CVEs affecting Apache Struts 6.x
```

### Find vendor advisories

Describe the exploitation status and product class rather than one CVE ID.

```text theme={null}
vendor advisories for actively exploited VPN vulnerabilities
```

### Review a vendor's security posture

Name the document type and the vendor class.

```text theme={null}
subprocessor lists for SOC 2 compliant CRM vendors
```

### Research an adversary

Name the group or campaign and the technique or sector you care about.

```text theme={null}
reports on ransomware groups targeting healthcare providers this year
```

## Make a request

<CodeGroup>
  ```python Python theme={null}
  from exa_py import Exa

  exa = Exa()

  results = exa.search(
      "critical CVEs affecting Apache Struts 6.x",
      type="auto",
      num_results=10,
  )
  ```

  ```javascript JavaScript theme={null}
  import Exa from "exa-js";

  const exa = new Exa();

  const results = await exa.search(
    "critical CVEs affecting Apache Struts 6.x",
    {
      type: "auto",
      numResults: 10,
    }
  );
  ```

  ```bash cURL theme={null}
  curl -s -X POST https://api.exa.ai/search \
    -H "Authorization: Bearer $EXA_API_KEY" \
    -H "Content-Type: application/json" \
    -d '{
      "query": "critical CVEs affecting Apache Struts 6.x",
      "type": "auto",
      "numResults": 10
    }'
  ```
</CodeGroup>

## Get structured data with Exa Agent

For structured data that requires research across multiple sources, use an [Exa Agent task run](/docs/agent/quickstart). Describe the products, threat criteria, and output fields you need, and Agent returns schema-validated results with citations.

<Card title="Start an Agent task" icon="bot" href="/docs/agent/quickstart" cta="Open Agent guide" arrow="true">
  Screen a vendor across advisories, breach reporting, and trust pages, or assemble normalized vulnerability data.
</Card>