A Zapier workflow that uses Apify. NexGenData has no official Zapier app — you run a public-data Apify actor inside Zapier through Apify’s official integration, scheduled, with your own Apify account.
The problem: new vulnerabilities drop faster than teams can triage
Hundreds of CVEs publish weekly, but only a few matter to your stack — the ones affecting your vendors, especially anything on CISA’s Known Exploited Vulnerabilities (KEV) list or with a high EPSS score. Watching feeds by hand is noisy and slow. A scheduled Zap filters to what’s relevant and alerts your team in Slack or an issue tracker the moment it lands.
Who this is for
Security, IT, and platform/dev teams who want vendor- and product-specific vulnerability alerts.
The Zapier workflow
- Schedule — Schedule by Zapier (a few times a day).
- Run Actor — Apify “Run Actor” → CVE Vulnerability Monitor (NVD + CISA KEV + EPSS), with your vendors/products in the input.
- Fetch dataset items — pull CVE ID, CVSS, CISA KEV flag, EPSS, summary.
- Filter / dedupe — keep KEV = true OR CVSS ≥ 9; drop CVEs already seen.
- Send to destination — Slack alert, Gmail, Google Sheets, or a webhook into an issue tracker (Webhooks is a paid Zapier app).
Sample input (vendor watchlist)
| vendor | product |
|---|---|
| fortinet | fortios |
| microsoft | windows |
| apache | struts |
Sample output (KEV-filtered alerts)
| cve_id | vendor | cvss | cisa_kev | epss | summary |
|---|---|---|---|---|---|
| CVE-2026-12345 | fortinet | 9.8 | true | 0.91 | Pre-auth RCE in SSL-VPN (exploited) |
| CVE-2026-30021 | apache | 9.1 | true | 0.77 | OGNL injection RCE |
Illustrative sample.
Run it on a schedule
Scheduled runs give your team a tuned vulnerability feed: only CVEs that hit your vendors and cross your severity/KEV threshold reach Slack — deduped, so no repeat noise.
Try it
Run the CVE Vulnerability Monitor →
Browse more: Cybersecurity & Domain Intelligence cluster
More Zapier workflows
FAQ
What sources does it use? The actor combines NVD (CVE data), CISA KEV (known-exploited list), and EPSS (exploit-probability scoring).
How do I cut the noise? Filter on KEV = true or a CVSS/EPSS threshold and dedupe by CVE ID so each alert fires once.
Is this an official Zapier app? No — it’s a Zapier workflow using Apify’s official Zapier integration with your own Apify account.