Sync API¶

Trigger and monitor vulnerability data synchronization (exploited vulnerabilities, CVE records, exploit probability).

Permissions

Manual sync triggers are admin-only operations.

Trigger a full sync¶

Runs a full vulnerability sync (exploited vulnerabilities plus recent CVE records) in the background and returns immediately with a job id you can poll.

curl -X POST https://sentrikat.example.com/api/sync \
  -b cookies.txt

Rate limit: 5 requests/minute. Super Admin only.

Sync status¶

curl https://sentrikat.example.com/api/sync/status \
  -b cookies.txt

Returns the state of the current/last sync job (progress, counts, errors).

Sync history¶

curl https://sentrikat.example.com/api/sync/history \
  -b cookies.txt

Returns past sync runs with timestamps and results.

Trigger an exploit-probability sync¶

Updates exploit probabilitys for known CVEs:

curl -X POST https://sentrikat.example.com/api/sync/epss \
  -b cookies.txt

Scheduled syncs¶

Manual triggers are rarely needed. The scheduler keeps data fresh automatically:

Source	Schedule
the exploited-vulnerability catalogue	Daily at 02:00 (in the configured display timezone)
Vendor advisories	Daily, 1 hour after the exploited-vulnerability sync
exploit probabilitys	Daily
software identity catalogue	Weekly

See Data Sources & Intelligence for what each source provides.