Skip to main content

​
Dvuln API Documentation

The Dvuln API enables you to programmatically manage projects, issues, and comments within your organization’s security operations. Build custom integrations, automate workflows, and extend Dvuln’s capabilities to fit your needs.

​
Base URL

All API requests are made to: 
https://console.dvuln.com

​
Authentication

The Dvuln API uses API key authentication. Include your API key in the request headers: 
Authorization: Bearer YOUR_API_KEY
Keep your API key secure and never expose it in client-side code or public repositories.

​
Quick Start

​
1. Get your API key

Generate an API key from your Dvuln dashboard under Settings → API Keys.

​
2. Make your first request

Test your authentication with the /api/org/info endpoint: 
curl -X GET https://console.dvuln.com/api/org/info \
  -H "Authorization: Bearer YOUR_API_KEY"

​
3. Explore the API

Use the interactive playground on each endpoint page to test requests directly from your browser.

​
Core Resources

​
Organizations

Manage organization settings and retrieve organization information.

​
Projects

Create, update, and manage security projects within your organization.

​
Issues

Track vulnerabilities, security findings, and remediation efforts.

​
Comments

Add notes, updates, and collaborate on security issues.

​
Response Format

All API responses return JSON with consistent formatting: 
{
  "data": {
    // Response data
  },
  "success": true,
  "message": "Operation completed successfully"
}

​
Error Handling

The API returns standard HTTP status codes:
Status CodeDescription
200Success
400Bad Request - Invalid parameters
403Forbidden - Invalid API key
404Not Found - Resource doesn’t exist
500Internal Server Error
Error responses include details: 
{
  "error": {
    "code": "INVALID_API_KEY",
    "message": "The provided API key is invalid or expired"
  },
  "success": false
}

​
Rate Limits

API requests are rate limited to ensure platform stability:
  • Default limit: 1000 requests per hour
  • Burst limit: 100 requests per minute
Rate limit headers are included in all responses:
  • X-RateLimit-Limit: Maximum requests per hour
  • X-RateLimit-Remaining: Requests remaining
  • X-RateLimit-Reset: Unix timestamp when limit resets

​
Need Help?