> ## Documentation Index
> Fetch the complete documentation index at: https://exa.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> The Exa API is served at https://api.exa.ai. Authenticate with `Authorization: Bearer $EXA_API_KEY` (or `x-api-key: $EXA_API_KEY`); create keys at https://dashboard.exa.ai/api-keys?utm_source=docs&utm_medium=docs&utm_campaign=markdown_instructions. Every way an agent can get access to Exa is described at https://exa.ai/auth.md.
> Prefer the official SDKs, `exa-py` (`pip install exa-py`) and `exa-js` (`npm install exa-js`); both read `EXA_API_KEY` from the environment.
> Tool-using agents can call Exa without writing code through the hosted MCP server at https://mcp.exa.ai/mcp, or install the Exa agent skill with `npx skills add exa-labs/agent-skills` (skill file: https://exa.ai/docs/skill.md).
> The OpenAPI specs at https://exa.ai/docs/exa-spec.yaml and https://exa.ai/docs/team-management-spec.yaml are the source of truth for request and response schemas.

# Cybersecurity

> Find vulnerabilities, advisories, threat reporting, and trust documentation with Exa Search.

Use Exa Search for vulnerability records, vendor advisories, and threat research from the sources security teams already read.

## Included

* CVE and GHSA vulnerability records
* Vendor security advisories and patch notes
* Threat intelligence reports and incident write-ups
* Trust pages, subprocessor lists, and compliance documentation
* Security blogs, conference talks, and research

## Use it for

* Vulnerability triage and exposure assessment
* Threat intelligence and adversary tracking
* Vendor risk and third-party security reviews
* Security monitoring and alerting

## Example queries

### Triage a vulnerability class

Name the product, version range, and severity.

```text theme={null}
critical CVEs affecting Apache Struts 6.x
```

### Find vendor advisories

Describe the exploitation status and product class rather than one CVE ID.

```text theme={null}
vendor advisories for actively exploited VPN vulnerabilities
```

### Review a vendor's security posture

Name the document type and the vendor class.

```text theme={null}
subprocessor lists for SOC 2 compliant CRM vendors
```

### Research an adversary

Name the group or campaign and the technique or sector you care about.

```text theme={null}
reports on ransomware groups targeting healthcare providers this year
```

## Make a request

```python Python theme={null}
from exa_py import Exa

exa = Exa()

results = exa.search(
    "critical CVEs affecting Apache Struts 6.x",
    type="auto",
    num_results=10,
)
```

```javascript JavaScript theme={null}
import Exa from "exa-js";

const exa = new Exa();

const results = await exa.search(
  "critical CVEs affecting Apache Struts 6.x",
  {
    type: "auto",
    numResults: 10,
  }
);
```

```bash cURL theme={null}
curl -s -X POST https://api.exa.ai/search \
  -H "Authorization: Bearer $EXA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "query": "critical CVEs affecting Apache Struts 6.x",
    "type": "auto",
    "numResults": 10
  }'
```

## Get structured data with Exa Agent

For structured data that requires research across multiple sources, use an [Exa Agent task run](https://exa.ai/docs/agent/quickstart.md). Describe the products, threat criteria, and output fields you need, and Agent returns schema-validated results with citations.

> [card] [Start an Agent task](https://exa.ai/docs/agent/quickstart.md)
>
> Screen a vendor across advisories, breach reporting, and trust pages, or assemble normalized vulnerability data.