---
title: "CISA KEV threats relevant to circumvention tools"
method: GET
path: "/v1/atlas/threats"
tags: ["Atlas"]
---

# CISA KEV threats relevant to circumvention tools

`GET /v1/atlas/threats`

## Request

- Base URL: `https://api.voidly.ai`
- URL: `https://api.voidly.ai/v1/atlas/threats`
- Auth: none declared

## Query parameters

- `limit` integer
- `vendor` string
- `ransomware` string
- `since` string, date
- `min_severity` 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW'
- `sort` string
- `all` string

## Response `200`

Source-grounded synthetic contract example; illustrative values are not a live receipt.

- object
  - `source` string
  - `scope` string
  - `filtered_total` integer
  - `known_ransomware_total` integer
  - `returned` integer
  - `generated_at` string
  - `disclaimer` string
  - `threats` unknown[]
    - unknown

## Other responses

- `503`: Source-grounded synthetic contract example; illustrative values are not a live receipt.

## Changes

- **2026-10-09** `3205a03feae3`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/voidly/apis/voidly-api/changes/v1/atlas/threats/get.md)

---

[API](https://skmtc.dev/voidly/apis/voidly-api.md) - [All operations](https://skmtc.dev/voidly/apis/voidly-api/llms.txt) - [OpenAPI document](https://skmtc.dev/voidly/apis/voidly-api/revisions/c085ac335933?raw)
