What this endpoint does

Generates simulated vulnerability scan findings for integration testing — CVEs from the RF vulnerability risk list paired with realistic but synthetic host metadata. Refreshed every four hours. Use this to test parsing logic before connecting to live scan sources; not suitable for production intelligence. For real vulnerability data, use Vulnerability: Search or Vulnerability: Lookup.

Response data

Returns NDJSON (newline-delimited JSON) — one JSON object per line with no wrapping array or envelope — despite the Content-Type: application/json header. Do not parse the full response as a single JSON document; read line-by-line. Each line represents a simulated Nessus-style vulnerability scan finding: a CVE paired with synthetic host information (IP, DNS, NetBIOS), CVSS scoring (base and temporal with vector string), plugin metadata mimicking Tenable's format, and exploit availability flags. The format is modeled on Juniper NetScreen syslog output, so use it to validate that your SIEM or vulnerability management integration correctly parses this structure before switching to live data. Use limit (max 1000) to control output volume; there is no pagination cursor.