> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanoss.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Dataset

> The Security Dataset provides tools for identifying vulnerabilities and CVEs in your components. Choose your approach based on your specific needs.

The Security Dataset identifies known vulnerabilities (CVEs) in the open source components your project depends on, both direct matches and transitive dependencies. Use it to catch security risk in your software supply chain before it reaches production.

## What Do You Need?

```mermaid theme={null}
graph TD
SecurityStart[Security Dataset<br/>Identify Vulnerabilities & CVEs]

    SecurityStart --> Purpose[What do you need?]

    Purpose --> API[Direct API Queries]
    Purpose --> CLI[Command Line Scanning]
    Purpose --> Visual[Visual Analysis]

    subgraph SecurityTools["Available Tools"]
        direction LR
        SecurityAPI[SCANOSS API]
        SecurityPY[SCANOSS-PY]
        SecurityWorkbench[SBOM Workbench]
    end

    API --> SecurityAPI
    CLI --> SecurityPY
    Visual --> SecurityWorkbench

    SecurityAPI --> VulnGuide([Vulnerability Scanning Guide])
    SecurityPY --> VulnGuide

    style SecurityStart fill:#EF5350,stroke:#E53935,stroke-width:3px,color:#fff
    style Purpose fill:#E57373,stroke:#EF5350,stroke-width:2px,color:#fff
    style API fill:#EF9A9A,stroke:#E57373,stroke-width:2px,color:#fff
    style CLI fill:#EF9A9A,stroke:#E57373,stroke-width:2px,color:#fff
    style Visual fill:#EF9A9A,stroke:#E57373,stroke-width:2px,color:#fff

    style SecurityTools fill:#FFEBEE,stroke:#EF5350,stroke-width:2px,color:#000
    style SecurityAPI fill:#FFCDD2,stroke:#EF9A9A,stroke-width:2px,color:#000
    style SecurityPY fill:#FFCDD2,stroke:#EF9A9A,stroke-width:2px,color:#000
    style SecurityWorkbench fill:#FFCDD2,stroke:#EF9A9A,stroke-width:2px,color:#000
    style VulnGuide fill:#EF5350,stroke:#B71C1C,stroke-width:3px,color:#fff

    click SecurityAPI "/en/latest/apis/vulnerability-api" "SCANOSS API" _blank
    click SecurityPY "/en/latest/cli/scanoss-py/commands-and-arguments#vulns" "SCANOSS-PY" _blank
    click SecurityWorkbench "/en/latest/clients/workbench/project-scanning-auditing-reporting#vulnerabilities" "SBOM Workbench" _blank
    click VulnGuide "/en/latest/poc/datasets/security-dataset/vulnerability-scanning" "Vulnerability Scanning Guide"
```

### [SCANOSS API](/en/latest/apis/vulnerability-api)

Direct API access for vulnerability detection, including CPE identifiers and known CVEs.

### [SCANOSS-PY](/en/latest/cli/scanoss-py/commands-and-arguments#vulns)

Command-line tool for identifying vulnerabilities and CVEs from the terminal.

### [SBOM Workbench](/en/latest/clients/workbench/project-scanning-auditing-reporting#vulnerabilities)

Visual interface for comprehensive vulnerability analysis with detailed reporting and risk assessment.

### [Vulnerability Scanning Guide](/en/latest/poc/datasets/security-dataset/vulnerability-scanning)

A complete end-to-end workflow combining SCANOSS-PY and the REST API: scan a project, extract component PURLs from both matched code and declared dependencies, query for CVEs, then interpret and prioritise the findings.

Need help? [Contact our AI assistant](?assistant=open)