> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kikimora.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Fetching vulnerabilities

> Trigger an on-demand vulnerability update for selected endpoints, and understand the selection behavior, hourly rate limit, and permissions.

You can manually trigger a vulnerability update for connected endpoints straight from the Endpoints list.

## Fetch vulnerabilities

1. Select one or more endpoints using their row checkboxes, or use the header checkbox to select every endpoint visible on the current page.

   <img src="https://mintcdn.com/kikimora/_61TKijx1WdBSLGY/images/endpoints/fetching-vulnerabilities--01--select-endpoints.png?fit=max&auto=format&n=_61TKijx1WdBSLGY&q=85&s=e97bedf709e37defa3c8f4ca1ade91e4" alt="Endpoints table with several host rows selected via their checkboxes" width="1920" height="1080" data-path="images/endpoints/fetching-vulnerabilities--01--select-endpoints.png" />

2. Click **Fetch Vulnerabilities (N)** in the action bar above the table.

   <img src="https://mintcdn.com/kikimora/_61TKijx1WdBSLGY/images/endpoints/fetching-vulnerabilities--02--confirmation-dialog.png?fit=max&auto=format&n=_61TKijx1WdBSLGY&q=85&s=43736eccbf285012a1a725c2982df789" alt="Confirmation dialog explaining the once-per-hour fetch limit before sending the request" width="1920" height="1080" data-path="images/endpoints/fetching-vulnerabilities--02--confirmation-dialog.png" />

3. Read the confirmation prompt, which notes the once-per-hour limit, then click **Confirm**.

   <img src="https://mintcdn.com/kikimora/_61TKijx1WdBSLGY/images/endpoints/fetching-vulnerabilities--03--fetch-success.png?fit=max&auto=format&n=_61TKijx1WdBSLGY&q=85&s=07bed8dd4bd4cf2ae346af8681bb7d6e" alt="Success notification confirming the vulnerability fetch request was sent to the agent integration" width="1920" height="1080" data-path="images/endpoints/fetching-vulnerabilities--03--fetch-success.png" />

## Selection and limits

**Selection across pages.** The header checkbox selects every record on the current page. Your selection is tracked as you move between pages or change the page size, so it survives navigation.

**Hourly rate limit.** Manual fetches are limited to **once per hour** per tenant and endpoint. Requesting again before the cooldown expires returns a throttle warning (HTTP 429), which protects the background Wazuh scanning routines from overload.

**Permissions.** Fetching requires tenant scanning permissions. Without them the button is hidden, or the request returns an access error.
