Target Intelligence takes a CVE identifier and returns every confirmed vulnerable internet-facing host - with IP address, geography, ASN, port, protocol, and exact version details. We identify vulnerable systems by querying product-specific endpoints to extract exact version information, not server banner reads. The result is a continuously updated, queryable map of what's exposed and what's confirmed. Coverage spans hundreds of CVEs. Expanding daily.
Solution details
Target Intelligence takes a CVE identifier and returns every confirmed vulnerable internet-facing host - with IP address, geography, ASN, port, protocol, and exact version details. We identify vulnerable systems by querying product-specific endpoints to extract exact version information, not server banner reads. The result is a continuously updated, queryable map of what's exposed and what's confirmed. Coverage spans hundreds of CVEs. Expanding daily.
Cyber Insurance
Before issuing a policy, supply a prospective client's IP ranges or ASN. Get back a list of hosts with confirmed findings against KEV CVEs. That data maps directly to actuarial workflows in a way "potentially vulnerable" signals from generic tools don't.
Defense & Intelligence
For offensive teams: what CVEs are present in an adversary's IP space right now? For defensive teams: continuous awareness of what's exposed across your area of responsibility. Several nation-state-level customers have independently validated Target Intelligence is the highest-confidence data available for this use case.
Security Vendors & MSSPs
MSSPs can query by customer-specific identifiers to surface new vulnerabilities across managed environments. Security vendors can integrate exploit-awareness directly into their own products using our BigQuery dataset or API - SQL-queryable.
Large Enterprise
Internal CTI and vulnerability management teams can answer three questions with a single query: Am I on the list? Are my vendors on the list? Is my supplier on the list? Supply chain risk becomes queryable.
Highlights
When a critical CVE or KEV entry drops, incident responders need to know within minutes whether the organization is exposed. Target Intelligence returns every confirmed vulnerable internet-facing host for a given CVE, with IP, ASN, geography, port, protocol, and exact version. Because versions are verified via product-specific endpoints, not banner reads, IR teams can scope, prioritize, and contain based on confirmed exposure across their own ranges, vendors, and suppliers.
AppSec teams rarely have a complete picture of which application versions are reachable from the internet, especially across acquired units, shadow IT, and third-party hosting. Target Intelligence provides a continuously updated map of exposed applications by product, CPE, and exact version, tied to the CVEs that affect them. Validate that patches reached production, find forgotten instances of web servers and frameworks, and feed verified exposure into VM and SDLC gates via API or BigQuery.
Network security teams need to see what attackers see when they scan the perimeter. Target Intelligence delivers that attacker's-eye view: which services are exposed, on which ports and protocols, running which vulnerable versions, across every ASN and IP range you own or depend on. Use it to drive firewall and segmentation decisions, confirm decommissioned services are truly offline, monitor supplier exposure, and correlate with VulnCheck-tracked C2 infrastructure to block active campaigns.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing has one pricing dimension billed as a contract. You commit to a fixed term and pay a single contract price that covers up to 25 users for the Target Intelligence for Government service. The price is flat for that user cap, not metered by query volume or usage. There are no separate tiers or add-ons to combine. The dimension gives your team access to data that maps a given CVE to confirmed vulnerable internet-facing hosts, delivered through a query API, a SQL-queryable dataset, or direct file access.
Top-of-mind questions for buyers
What counts as one user under the up to 25 users cap?
The contract covers up to 25 named individuals on your team who access Target Intelligence for Government. The price is flat for that user cap, so adding people within the 25-user limit does not change your cost. You are not charged by query volume or hosts returned.
Does my cost increase if I run more queries or pull larger result sets?
No. The contract price is flat for the user cap and does not meter by query count or data volume. You can query by CVE, product, or CPE and retrieve confirmed vulnerable hosts without per-query charges. Community-level API access carries a 1,000 requests-per-minute rate limit.
How can my team access the data covered by this contract?
You can consume Target Intelligence three ways: query it live through a purpose-built API, run SQL queries against the full dataset, or take raw backup files directly. The API lets you query by CVE, product, or CPE and returns JSON. All three delivery methods are covered by the same contract.
www.vulncheck.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
VulnCheck customers will be assigned a dedicated Customer Success Manager and Engineer to ensure that they are able to use VulnCheck intelligence to its fullest potential. We provide direct support via Slack/Teams, web meetings, phone, or email.
support@vulncheck.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
VulnCheck's Threat intelligence focused on network-level risk, identifying potentially vulnerable systems and malicious infrastructure relevant to exploitation.
Target Intelligence takes a CVE identifier and returns every confirmed vulnerable internet-facing host - with IP address, geography, ASN, port, protocol, and exact version details. We identify vulnerable systems by querying product-specific endpoints to extract exact version information, not server banner reads. The result is a continuously updated, queryable map of what's exposed and what's confirmed. Coverage spans hundreds of CVEs. Expanding daily.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.